8490 results about "Domain name" patented technology

In a network interconnecting a plurality of content providers and a plurality of clients, for providing content to a client, each of the plurality of content providers is coupled to at least one content distribution network of a plurality of content distribution networks, wherein the client is coupled to at least one of the plurality of content distribution networks and a request for the content is sent from the client to a redirector node that receives requests, wherein a redirector at the redirector node provides an address for a server available to serve the requested content. When the client's content distribution network is a primary content distribution network for the content provider providing the requested content, redirecting the client to a server within the client's content distribution network. When the client's content distribution network is not a primary content distribution network for the content provider but the client's content distribution network has a content peering relationship with a primary content distribution network for the content provider, redirecting the client to a server within the client's content distribution network. When the client's content distribution network is not a primary content distribution network for the content provider and the client's content distribution network does not have a content peering relationship with a primary content distribution network for the content provider, redirecting the client to a server outside the client's content distribution network. The redirecting can be done using a domain name service (DNS) server that responds to requests for domain name resolution that include metadata encoding for the content being requested and / or attributes of the resolution request other than a domain name or explicit client / redirector communication to perform the redirection.

An embodiment of the invention is a client on a local area network that periodically and automatically evaluates its physical connectivity with the local area network, exercises local-network services such as DHCP, and verifies Internet connectivity and function by pinging one or more numerically specified IP addresses and by pinging one or more IP addresses specified by an FQDN (Fully Qualified Domain Name) known to the assigned DNS servers. An embodiment of the invention may include a plurality of client elements monitoring one or more networks. Functionality according to embodiments of the invention can send notices, automatically initiate action, and otherwise assist in, among other things, remote monitoring and administration of networks, and particularly wireless networks.

The actual site that serves the Web pages to a client in response to a URL domain name is automatically and transparently selected from a list of many switches each having identical data storage. In a peer hand-off process, a switch receives domain name server lookup request for a particular virtual Internet protocol (VIP) domain name. The switch examines the source IP-address for the domain name server request, examines the user's IP-address, and determines if there is server site that is geographically close to that user. The switch examines an ordered hand-off table corresponding to the domain. The switch chooses a next remote server (or its own VIP) in line based on, (a) the remote server location compared to domain name server request source, (b) the remote servers' weights, and (c) the remote server that experienced the previous hand-off. The switch then sends the domain name server response back to client domain name server with the IP-addresses in an ordered list.

A method for detecting automatically generated malicious domain names in a network. The method includes identifying a plurality of domain name service (DNS) queries in the network, wherein the plurality of DNS queries share a common attribute, analyzing, using a central processing unit (CPU) of a computer, the plurality of DNS queries to identify a plurality of alphanumeric elements embedded in a set of domain names associated with the plurality of DNS queries, analyzing, using the CPU, the plurality of alphanumeric elements to determine a distribution metric of the set of domain names, and generating an alert based on the distribution metric according to a pre-determined criterion.

A content distribution system has a DNS server which is configured to provide DNS responses in response to DNS requests, and a device which interconnects between a client and the DNS server. The device includes an interface which communicates with the client, and a controller coupled to the interface. The controller can intercept a first DNS request en route from the client to the DNS server, and provide a second DNS request to the DNS server through the interface in response to interception of the first DNS request. The second DNS request selectively includes a client identifier which identifies the client, and not including the client identifier which identifies the client, based on a selection decision. The controller can further convey a DNS response from the DNS server to the client through the interface. The DNS response includes a content server identifier which identifies a content server.

The present invention provides for a Domain Name Router (DNR) that uses domain names to route data sent to a destination on a network (e.g., a stub network). Each corporate entity or stub network can be assigned one or a small number of global addresses. Each of the hosts on the stub network can be assigned a global address. When a source entity sends data to a destination entity with a local address, the data is sent to the DNR using a global address. The source entity embeds the destination's domain name and its own domain name inside the data. The DNR extracts the destination's domain name from the data, translates that domain name to a local address and sends the data to the destination.

An Internet directory system and method that is based on user telephone number addressing. The system includes an interactive white and yellow pages directory that is based on telephone numbers. Thus, a user's telephone number is a unique identifier used to key other information within the directory. The telephone number may also be used as the primary component of an email address, domain name, or web site URL for the user. The use of a telephone number as the primary component of an e-mail address or domain name greatly simplifies the process of locating a user. E-mail addresses and domain names may be readily found using standard telephone information services, such as "411", as well as other telephone-based methods for obtaining telephone directory information. This Internet directory system and method brings all communication methods and directory services together using one searchable key, a user's telephone number. The directory entry page may be created, edited and updated by the subscriber using simple html editing or using a voice telephone call or via fax, without the use of a personal computer. Thus, the present invention provides an open directory model wherein the end users construct the directory, and the directory is "living", i.e., dynamically changeable and updateable. The power of the directory is thus placed in the users' hands. The telephone based Internet directory system of the present invention also provides addressing for unified messaging as well as locality in addressing.

A system and method for balancing the load on virtual servers managed by server array controllers at separate data centers that are geographically distributed on a wide area network such as the Internet is described. The virtual servers provide access to resources associated with a domain name request by a client program. When a Primary Domain Name System (DNS) determined the requested domain name is delegated to a EDNS, the EDNS employs metric information and statistics to resolve an IP address for a virtual server that is selected by the EDNS to optimally balance the load and provide access to resources associated with the domain name. The EDNS may load balance name servers. Additionally, the name server load balancing system may bridge disparate content delivery networks. Internet addresses are divided into geographical information that is used to delegate traffic. Also, metric information is collected and analyzed to help distribute the traffic.

Malicious network activities do not make use of the Domain Name System (DNS) protocol to reach remote targets outside a local network. This DNS-based enforcement system for confinement and detection of network malicious activities requires that every connection toward a resource located outside the local network is blocked by default by the local enforcement box, e.g. a firewall or a proxy. Outbound connections are allowed to leave the local network only when authorized directly by an entity called the DNS Gatekeeper.

Presented is a system and a method for load balancing multiple globally-dispersed servers based on client-centric performance criteria. The infrastructure of the system includes load balancing domain name servers (DNS-LBs) deployed in close physical proximity to the Internet service providers' points of presence. The DNS-LBs are then able to monitor the performance of the servers from a location close to the clients, which allows the DNS-LBs to select a server that will yield the best performance from that location for the client. A second level of the infrastructure utilizes domain name servers (DNS-Bs) that are deployed on the Internet backbones and regional provides. The authoritative domain name servers (DNS-As) for the servers to be load balanced refer all name queries to these DNS-Bs. The DNS-Bs then refer the queries to one of the DNS-LBs based on a mapping of the DNS-ISP address to its physically proximate DNS-LB. The DNS-LB then returns the IP address of the server that will provide the best performance from that location.

An embodiment is directed to a method for selectively routing a DNS request in which a DNS request to translate a domain name is received from a local client device. The DNS request is directed to a remote DNS server on a remote network. A link status to the remote network is identified. If the link status indicates that a connection to the remote network is not possible, the DNS request is routed to a locally embedded DNS server. If the link status indicates that a connection to the remote network is possible, the DNS request is routed to the remote DNS server on the remote network.

An input request may be processed by a device such as a network access apparatus, servlet, applet, stand-alone executable program, or a user interface element such as a microphone, text box object or location field of a web browser. When such an input request is determined to include a valid domain name, it may then be determined whether to perform a search request with the input as a literal string. A search request may be initiated by selecting an exact phrase option from a listbox or by surrounding the input with a delimiter such as the quote sign (e.g., “example.com”) to process the detected domain name as a literal string, otherwise a domain name detected from input may be processed as a registration and / or resolution request. When it is determined that the input is instead processed as a resolution and / or registration request, then the resolvability and / or availability of the domain name may be determined. When the domain name is determined to be not resolvable, then the domain name may be processed as a registration request.

A system and method for providing connectivity to a foreign network for a device configured for communication over a home network without reconfiguring the device include intercepting packets transmitted by the device, selectively modifying intercepted packets which are incompatible with the foreign network to be compatible with network settings of the foreign network, and selectively providing network services for the device corresponding to network services available on the home network to reduce the delay associated with accessing the network services from the foreign network, or to provide network services otherwise inaccessible from the foreign network. Network services are provided by or through a configuration adapter connected to the device or to the foreign network. The configuration adapter accommodates incompatibilities resulting from proxy server requests, domain name server requests, and / or outgoing email service requests to provide transparent network access for mobile users without reconfiguration of the users computing device.

Methods, systems, and articles of manufacture consistent with the present invention provide an improved query server that overcomes the shortcomings of existing domain name searching techniques by performing a multitude of searches simultaneously, transparent to the user. Specifically, the improved query server searches for existing domain name records in various domains and then displays the results in a formatted manner, thus eliminating the need for a user to perform individual searches.

Assessment of risk to a specified name that represents at least one of a brand name, a domain name, a trademark, a service mark or a business entity name, includes acquiring data relating to the specified name, and quantifying risks to the specified name in the event a third-party has obtained, or were to obtain, a registration to the same name or a variant of the name. Risk scores are associated with the potential and actual registrations. An interactive display showing the risk scores is provided. Monitoring domain names and parsing domain names also are disclosed.

When a network resource request having a domain name is received, it is determined whether the network resource can be accessed from the domain name. Rather than, or in addition to, displaying an error message or processing a search request in response to determining that a network resource can not be accessed, the domain name can instead be redirected to a registration service where the domain name can be automatically used to perform a registration request and determine domain name availability. When the domain name is not available for registration, domain name registrant information is provided. However, when the domain name is determined available, a registration form is provided. For example, such a domain name may be redirected from the autosearch feature of a web browser to a service, which determines that the domain name is available for registration enabling a potential registrant to register the available domain name by selecting a domain name registration provider from a list of domain name registration providers.

A method and a system for designating a priority access order of one or more DNS servers. DNS servers are accessed in the designated order until an IP address is found or until there are no more DNS servers to access. The DNS servers' IP addresses may be received from a network configuration server or the IP addresses may be entered by a user. The priority access order may be designated by a user or the order may be determined by examining a history of DNS server requests and a history of DNS server responses. After a translation of a domain name into an IP address is requested, the request is sent to one or more of the DNS servers in the designated access order. Alternatively, the DNS servers may be accessed in the order the servers are listed in the computer system's network configuration settings.

A serverless name resolution protocol ensures convergence despite the size of the network, without requiring an ever-increasing cache and with a reasonable numbers of hops. This convergence is ensured through a multi-level cache and a proactive cache initialization strategy. The multi-level cache is built based on a circular number space. Each level contains information from different levels of slivers of the circular space. A mechanism is included to add a level to the multi-level cache when the node determines that the last level is full. A peer-to-peer name resolution protocol (PNRP) includes a mechanism to allow resolution of names which are mapped onto the circular number space through a hash function. Further, the PNRP may also operate with the domain name system by providing each node with an identification consisting of a domain name service (DNS) component and a unique number.

The disclosed embodiments provide a system that secures a network. During operation, the system obtains a request for a resource from a client connected to the network. Next, the system uses a domain name from the request to obtain one or more properties associated with the domain name and assesses a level of risk associated with the domain name based on the one or more properties. Finally, the system processes the request based on the assessed level of risk.

A scalable domain name system with persistence and load balancing receives requests from client DNS servers or other DNS servers. Each DNS server is associated with a subset of the DNS groups in the network and the invention checks to see if the client DNS server is part of the DNS group that the DNS server is authoritative. If the DNS server is not authoritative for the client DNS server's group, then the request is forwarded to the proper DNS server. The receiving DNS checks to see if a persistent response is required for the request. If a persistent response is required, the appropriate IP address is returned to the requestor. If a persistent response is not required, the load, availability, and latency of the content servers are used to determine the proper content server's address to return to the requestor.

Embodiments of the present invention provide a method and system for determining a probability that a suspected domain name of a domain accessed using a universal resource locator (URL), which can be entered as a character string into a browser associated with a client in a net environment, is a counterfeit of a legitimate domain name. Characters in the suspected domain name can be identified as known as likely to be deceptively substituted for corresponding legitimate characters of a legitimate domain name. An alternate domain name is generated by substituting predetermined characters with the corresponding legitimate characters. An attempt can be made to resolve alternate domains of the alternate domain names. If the names are successfully resolved, a non-zero probability is assigned to the suspected domain name as being counterfeit.

A telecommunications system wherein the dialing of a directory number which has been ported triggers an intelligent network signal which is directed to the Internet. The signal is transmitted through the Internet to a database in the Internet. The database returns call set up directions which are used by the originating switching system to establish a voice link from the calling station to the station having the ported number. The intelligent network signal may be transmitted from the originating switching system to a signal transfer point (STP) and to the Internet. Within the Internet the signal is directed to an Internet database where a real number for the ported number is obtained. This is transmitted back to the signal switching point, which then uses the real number to complete the connection. In another embodiment, where a number has been ported to a station that is connected only to the Internet, the Internet database may provide a domain name address. This address is then used to establish a link through the Internet between the calling and called station. In this instance the Internet handles both the signaling and the voice connections.

A program running on a web server allows automated domain name registration, modification and management through an interface running on a client machine. The program redefines the concept of the Domain Name System zones by breaking them down into discrete records that can be managed in a database. The structuring of domain records in such a way allows global modifications to a given record type for all domains owned by a given domain name Registrant. Further, when run on the web server of an accredited registrar, the program enables domain name Registrants an easy and efficient way to reliably monitor and manage their domain name property.

Round-trip time (RTT) for communication between an edge point of presence (POP) in a content delivery network (CDN) and a local domain name server (LDNS) is determined by resolution of a canonical name (CNAME) record. A first server in a first edge POP in a CDN receives a request to resolve a domain name from a LDNS and transmits a CNAME record including a timestamp indicating when the CNAME record was transmitted to the LDNS. The first server subsequently receives a request from the LDNS to resolve the CNAME record and determines a RTT time indicating the time needed for round-trip transmission between the LDNS and the first server based on the time when the request to resolve the CNAME request was received by the first server and the time indicated by the timestamp.

A method for controlling access to information from a DNS server having an access control list specifying clients approved to receive an IP address corresponding to a domain name of a target host is disclosed. The method includes receiving a request from a client for an IP address of a domain name at the DNS server and looking up the domain name in an access control list. The client is sent a reply containing the IP address of the domain name if the client is authorized in the access control list to receive the IP address. If the client is not authorized to receive the IP address, the request is denied.

In a wireless ad hoc network comprising a plurality of nodes, a primary node receives a domain name service (DNS) query from a node. The primary node determines whether the query can be resolved based on cached information. If the DNS query can be resolved based on cached information, the primary node sends a response to the node. If the DNS query cannot be resolved based on cached information, the primary node sends the DNS query outside the ad hoc network for resolution.

An out-of-band Domain Name System (DNS) security technique uses a cryptographic blockchain for securing and validating DNS data in a chain of custody that exists outside the DNS namespace, allowing validated access to cached DNS information without requiring real-time access to root servers.

In one embodiment, the present invention is a method and apparatus for DNS pre-fetching for multiple clients. In one embodiment, all packets coming into or going out of a local network are scanned for application protocol, domain names, and / or other information. If pre-defined criteria indicate that the network is interested in a particular domain name, a DNS lookup is performed and the corresponding IP address is cached by the local DNS server. The local DNS server is thereby able to quickly respond to future requests for the cached domain name. Moreover, because the IP address is cached at the local DNS server, any client connected to the local DNS server on the local network can request the cached domain name from the local DNS server and be quickly connected to the indicated domain name.