Patent ID: 9535971
Date: 2017-01-03
CPC Classifications: G06F

Claim:
1. A method, implemented by at least one processor, for validating domain name system (DNS) registry transaction data, the method comprising: receiving, by the at least one processor, transaction data associated with a DNS registry database, wherein the transaction data is associated with DNS registry operations comprising at least one of: adding an Internet domain name, deleting an Internet domain name, renewing an Internet domain name, modifying an Internet domain name, restoring an Internet domain name, transferring an Internet domain name, adding an Internet domain name server, deleting an Internet domain name server, or modifying an Internet domain name server; obtaining one or more profiles from a profile database communicatively coupled with the DNS registry, wherein the one or more profiles comprise metadata describing one or more DNS registry operations comprising at least: adding an Internet domain name, deleting an Internet domain name, renewing an Internet domain name, modifying an Internet domain name, restoring an Internet domain name, transferring an Internet domain name, adding an Internet domain name server, deleting an Internet domain name server, and modifying an Internet domain name server; comparing, by the processor, the transaction data to the one or more profiles, wherein an alert is generated for transactions that do not match at least one of the one or more profiles; and determining, based on the one or more profiles, whether the transaction data is supposed to correlate with log data, wherein, for transaction data that is not supposed to correlate with log data, providing an indication that the transaction data is valid, and wherein, for transaction data that is supposed to correlate with log data: receiving, by the processor, log data associated with the transaction data; and correlating the transaction data with the log data associated with the transaction data, wherein a chain of custody is established for transaction data that correlates with the log data associated with the transaction data, and wherein an alert is generated for transaction data that is supposed to correlate with log data but does not correlate with the log data associated with the transaction data, indicating that at least one transaction represented by the transaction data is potentially invalid.