Patent ID: 11881938
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 0:
1. A method of provisioning an endpoint device for encrypted domain name service (DNS) resolution, comprising:
provisioning a signed client identity certificate for the endpoint device, comprising providing, from an intermediate device, an unsigned client identity certificate for the endpoint device to an enrollment server, receiving from the enrollment server the signed client identity certificate, and providing the signed client identity certificate to the endpoint device;
receiving an internet service provider (ISP) server certificate for an ISP DNS server;
providing the server certificate to the endpoint device;
establishing a first encrypted DNS session between the endpoint device and the ISP DNS server using the signed client identity certificate and the server certificate, using DNS over hypertext transport protocol secured (DoH) or DNS over transport layer security (DoT); and
providing cloud-based DNS security services to the endpoint device, including enabling the endpoint device to use the signed client identity certificate to establish a second encrypted DNS session to the ISP DNS server when the endpoint device roams outside of a home network.