发明名称 METHOD AND SYSTEM FOR USER AUTHENTICATION USING DNSSEC
摘要 This invention leverages DNSSEC to makes post-password technologies work against endpoints across the globe, rather than solely within company walls. It describes a system by which DS records are encoded in NS names, which traverse well from the customer to the registry. This invention also proposes a series of steps through which DNSSEC can be explored as a useful solution to real world problems. By creating and further developing a mirror of the real DNS, which grows by combination of true DNS record information with specially synthesized authentication keys, DNSSEC scales, providing greater security and less risk of corrupting or erroneous online material. This same technology also evaluates user activity to create a database of statistics regarding automated activity, as compared to human activity. This database assists in identification and prevention, or at least mitigation, of potential future attacks on any given client by automated bot-driven activity.
申请公布号 US2014282887(A1) 申请公布日期 2014.09.18
申请号 US201313828335 申请日期 2013.03.14
申请人 Kaminsky Daniel 发明人 Kaminsky Daniel
分类号 H04L29/06 主分类号 H04L29/06
代理机构 代理人
主权项 1. A system for secure data transmission with retrieval data from DNSSEC, comprising: a Delegation Signer (DS) Record being included or attached to or coupled with or encoded within the Name Server (NS) Record, wherein an NS channel is used for DS record data transmission.
地址 San Francisco CA US