Patent ID: 11863565
Assignee: TACTIKA.COM INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 6:
7. A system for securing access to a network asset using fully qualified domain names each having a unique and temporary hostname and each expiring after a cycle, the system comprising:
a client device connected to a network and having a memory, the client device having a client-side module stored in the memory thereof;
virtual machines each having an IP address and each being associated to one of the fully qualified domain names having the unique and temporary hostname, each one of the virtual machines being configured to operate either as a server hosting the network asset, as a reverse proxy, or as a firewall between the client device and the network asset;
a Domain Name System (DNS) server connected to the network and configured to store host records each including the IP address of one of the virtual machines and the fully qualified domain name having the unique and temporary hostname associated thereto; and
a computing device connected to the network and having a memory, the computing device having a server-side module stored in the memory thereof, the server-side module being configured to generate one fully qualified domain name having the unique and temporary hostname at the beginning of each cycle, the client-side module being configured to generate, on demand, the one fully qualified domain name having the unique and temporary hostname, the one fully qualified domain name having the unique and temporary hostname expiring at the end of the cycle, and, for each cycle, the server-side module being further configured to create one of the virtual machines corresponding to the generated fully qualified domain name having the unique and temporary hostname and to update the DNS server with a corresponding host record including the IP address of the virtual machine created in the cycle and the corresponding fully qualified domain name having the unique and temporary hostname, wherein at least one of the server-side module and the client-side module is configured to generate the unique and temporary hostname using a combination of a shared secret key associated to a client who is allowed to access the network asset, a time at generation representing Universal Time as a string and at least one logical operation.