Method for domain control validation

• US 9,178,888 B2
• Filed: 06/14/2013
• Issued: 11/03/2015
• Est. Priority Date: 06/14/2013
• Status: Active Grant

• Current Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Original Assignee: Go Daddy Operating Company LLC (GoDaddy, Inc.)
• Inventors: Thayer, Wayne, Plains, Jacob
• Primary Examiner(s): TURCHEN, JAMES R
• Application Number:
  US13/918,699
• Publication Number:
  US 20140373127A1
• Time in Patent Office: 872 Days
• Field of Search: 726/10
• US Class Current: 1/1
• CPC Class Codes: H04L 61/4511 using domain name system [DNS]
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/168 above the transport layer

Abstract

A system and method for domain control validation is presented. At a certificate authority a request is received. The request includes a certificate signing request and a first Internet protocol address. The certificate signing request identifies a domain and a certificate. A second Internet protocol address for the domain is retrieved from a domain name system. When the first Internet protocol address is the same as the second Internet protocol address, the certificate is signed, and the signed certificate is transmitted to a requester of the request. When the first Internet protocol address is not the same as the second Internet protocol address, the certificate signing request is rejected.

Claims

1. A method, comprising:

receiving, at a certificate authority from a web hosting provider, a request including a certificate signing request and a first plurality of Internet protocol addresses of a hosted account of a subscriber of the web hosting provider, the certificate signing request identifying a domain associated with the subscriber and a certificate;

retrieving a second plurality of Internet protocol addresses for the domain from a domain name system;

when a first one of the first plurality of Internet protocol addresses is the same as a first one of the second plurality of Internet protocol addresses;

signing the certificate to generate a signed certificate, and

transmitting the signed certificate to a requester of the request; and

when each one of the first plurality of Internet protocol addresses are different from each one of the second plurality of Internet protocol addresses;

rejecting the certificate signing request; and

initiating an alternative method for performing domain control validation for the domain.

2. The method of claim 1, wherein the certificate authority and the web hosting provider have a pre-established trusted relationship.

3. The method of claim 1, wherein the certificate authority and the web hosting provider are the same entity.

4. The method of claim 1, wherein the certificate authority and the web hosting provider are different entities.

5. The method of claim 1, wherein rejecting the certificate signing request includes transmitting a notification to the web hosting provider.