System for Providing DNS-Based Control of Individual Devices

摘要

A device control system is associated with individual devices connected through a network control point to a gateway and thereby to the Internet. The gateway inserts an EDNS0 pseudo resource record into an additional data section in each DNS query initiated by an individual device, the EDNS0 pseudo resource record identifying the initiating device. A dynamic policy enforcement engine in front of the DNS engine intercepts the DNS query, identifies the initiating device, and selects a policy that applies to the device. The dynamic policy enforcement engine may provide parental control and security service to the individual device by blocking the DNS query or passing it to the DNS engine according to the policy. A component that intercepts DNS queries may provide several additional types of services to the individual devices, including advertising, messaging, mobile device tracking, individual device application control, and delivery of individualized content.

主权项

1. A system for providing DNS-based control of individual devices, the system comprising:
a DNS engine operable to receive a DNS query from an individual device via a gateway associated with the individual device, the DNS query including a gateway identifier and a device identifier; a memory device operable to store at least one policy corresponding to the gateway identifier and the device identifier; and a dynamic policy enforcement engine operable to enforce the at least one policy to content delivered to the individual device.