18384780. SECURE CONDITIONAL DOMAIN NAME SYSTEM OPERATION (Microsoft Technology Licensing, LLC)

SECURE CONDITIONAL DOMAIN NAME SYSTEM OPERATION

Organization Name

Microsoft Technology Licensing, LLC

Inventor(s)

Ashish Jain of Bellevue WA US

Shyamshankar Dharmarajan of Los Altos CA US

Avraham Carmon of Hofit IL

Murali Krishna Sangubhatla of Fremont CA US

Andrey Terentyev of Pleasanton CA US

Rupa Paramasivan of Sammamish WA US

Sinead O’donovan of Seattle WA US

SECURE CONDITIONAL DOMAIN NAME SYSTEM OPERATION

This abstract first appeared for US patent application 18384780 titled 'SECURE CONDITIONAL DOMAIN NAME SYSTEM OPERATION

Original Abstract Submitted

Some embodiments enhance the security of domain name resolution and other DNS operations, by automatically intercepting the DNS operation, determining an associated device identity or ascertaining an associated user identity, and enforcing a security policy based on at least the DNS operation and based on at least one of the identities. Some securable DNS operations include resolution requests, reverse lookups from IP addresses to domain names, DNS record accesses, mail server mappings, redirection, forwarding, and DNS record cache operations. Enforcing the policy includes, e.g., preventing a result requested by the DNS operation, permitting computational progress toward the requested result, allowing a different result, modifying a DNS record, or flushing a DNS record from a cache. In some embodiments, DNS operation security functionality utilizes or implements a conditional access security functionality, thereby providing, e.g., a secure conditional domain name resolution.