Patent ID: 11924180
Assignee: IBOSS INC.
Field: Digital communication (Electrical engineering)
Classification: CPC H | IPC H

Claim 13:
14. A system comprising:
one or more processors; and
computer memory storing instructions that, when executed by the processors, cause the processors to perform operations comprising:
maintaining, before receiving a request to resolve a domain name, a predetermined set of domain names each associated with at least one particular address, each of the predetermined set of domain names identified as assigned to receive selectively-applied security actions, wherein the predetermined set of domain names are stored in a database that also contains monitoring rules that specify a particular security action to be applied to traffic, at least one of the domain names in the predetermined set of domain names based on a match of an address of the traffic and the at least one of the domain names in the predetermined set of domain names;
receiving from a particular client device, the request to resolve the domain name from a network that hosts a plurality of client devices including the particular client device;
sending a response to the request to resolve the domain name, the sent response including the particular address associated with the domain name;
receiving a secure request for a resource, the secure request directed to the particular address associated with the domain name;
determining that the secure request is directed to the domain name based on the association between the particular address and the domain name;
selectively decrypting the secure request based at least in part on determining that the secure request is directed to the domain name comprising:
determining that the secure request should be decrypted based at least in part on one or more rules; and
decrypting the secure request to generate decrypted information;

inspecting the decrypted information;
determining that the secure request should be blocked based at least in part on inspecting the decrypted information and at least in part on the one or more rules; and

blocking the secure request comprising sending a redirect response to the secure request, the redirect response including an address associated with a block notification page.