Patent ID: 9705922
Date: 2017-07-11
CPC Classifications: G06F,H04L,Y02B

Claim:
1. A cloud-based method for user-level policy, reporting, and authentication over Domain Name System (DNS), comprising: maintaining a local user Internet Protocol (IP) database identifying users in an enterprise; acting as a transparent proxy for all DNS requests from the users performing the steps of: subsequent to the performing the series of redirects and hand offs in the cloud-based system to identify the user, updating an identity of the user in the local user IP database; forwarding a second DNS request to the cloud-based system with the identifier from the local user IP database of the user associated with the second DNS request; performing, based on associated DNS requests and the local user IP database, user-level policy, reporting, and authentication by the cloud-based system responsive to uniquely identifying the users, wherein the performing comprises determining if one of the associated DNS requests is within policy of the enterprise for an associated user and returning a resolved address for the one of the associated DNS requests if it is within the policy.