Patent ID: 9130917
Filing Date: 2015-09-08
Classification: H04L

Abstract:
1. A Domain Name System Security Extensions (DNSSEC) signing server configured to interact with at least one DNSSEC client application and one or more digital signature modules that are configured to be executed by a processor, the DNSSEC signing server comprising: a processor implemented in hardware; and a storage device including computer readable code that, when executed by the hardware processor, causes the DNSSEC signing server to act as an authoritative server to: receive a signing request from the at least one DNSSEC client application to digitally sign a first data included in the signing request, the first data includes domain name system (DNS) data, and the one or more digital signature modules are configured to sign certain parts of the DNS data according to a DNSSEC protocol, without signing an entire zone; determine a type of signing function from among a plurality of signing functions based on the signing request; determine at least one of an active Key Signing Key (KSK) and an active Zone Signing Key (ZSK) from among one or more keys to digitally sign the first data based on the type that is determined; transmit the first data to one of the plurality of digital signature modules to be digitally signed; use the at least one of active KSK and active ZSK to digitally sign the first data in response to receiving the first data; receive a digital signature based on the first data from one of the one or more digital signature modules; and provide the digital signature based on the first data to the at least one DNSSEC client application.