Patent ID: 11881938
Assignee: MCAFEE, LLC
Field: Digital communication (Electrical engineering)
Classification: CPC H  G | IPC G  H

Claim 14:
15. An endpoint apparatus, comprising:
a processor circuit;
a memory; and
instructions encoded within the memory to instruct the processor circuit to:
establish an encrypted connection with a gateway device;
receive a signed client identity certificate from the gateway device, via the encrypted connection, wherein the signed client identity certificate is signed by an enrollment server;
receive an internet service provider (ISP) server certificate for an ISP domain name system (DNS) server via the encrypted connection;
establish an encrypted DNS session with the ISP DNS server with the server certificate and the signed client identity certificate, using DNS over hypertext transport protocol secured (DoH) or DNS over transport layer security (DoT); and
receive cloud-based DNS security services via the encrypted DNS session, including enabling the endpoint apparatus to use the signed client identity certificate to establish a second encrypted DNS session to the ISP DNS server when the endpoint apparatus roams outside of a home network.