Patent ID: 9172713
Filing Date: 2015-10-27
Classification: H04L,H05K

Abstract:
1. Apparatus for authenticating answers to Domain Name System (DNS) queries originating from recursive DNS servers, the apparatus comprising: a verification appliance, wherein the verification appliance comprises a CPU and a memory, disposed in front of and in serial communication with a separate recursive DNS server, the verification appliance being configured to (i) receive a DNS query from the recursive DNS server and to (ii) provide a first verification that the query originated from the recursive DNS server; a first authentication component in communication with the verification appliance via a network, the first authentication component being configured to (i) receive the DNS query and the first verification from the verification appliance, and to (ii) provide a first confirmation that the first verification corresponds to the received DNS query; and a first authoritative DNS server in serial communication with the first authentication component, the first authoritative DNS server being configured to (i) provide an answer to the DNS query and to (ii) transmit the answer to the first authentication component, a second authentication component, the second authentication component being in communication with the verification appliance via the network, the second authentication component being configured to receive the DNS query and the first verification from the verification appliance when the first authentication component is not functioning properly, and to provide a second confirmation that the first verification corresponds to the received DNS query; and a second authoritative DNS server,