Patent ID: 9699151
Date: 2017-07-04
CPC Classifications: H04L,H04W

Claim:
1. A computer-implemented method for determining a destination for secure web traffic executed by one or more processors, the method comprising: receiving a request to resolve a domain name from a client; determining that the domain name corresponds to a real Internet Protocol (IP) address that also corresponds to at least one other domain name, wherein the real IP address corresponds to a first network location hosting a particular resource; in response to determining that the domain name corresponds to the real IP address that also corresponds to at least one other domain name, creating an association between a spoofed IP address and the domain name, wherein the spoofed IP address is different than the real IP address corresponding to the domain name and corresponds to a second network location different than the first network location, and wherein the associated spoofed IP address uniquely identifies the domain name; sending a response to the request to resolve the domain name to the client, the response including the spoofed IP address associated with the domain name; receiving, at the second network location corresponding to the spoofed IP address, an encrypted request for the particular resource hosted at the first network location, the encrypted request directed to the spoofed IP address associated with the domain name; determining that the encrypted request is directed to the domain name based on the association between the spoofed IP address and the domain name, wherein the determination is performed without decrypting the encrypted request; and selectively blocking the encrypted request, or selectively decrypting the encrypted request, examining the decrypted contents of the encrypted request, and determining how to handle the encrypted request based on examining of the decrypted contents, wherein selectively blocking or decrypting the encrypted request is based at least in part on determining that the encrypted request is directed to the domain name.