Patent ID: 7296155
Filing Date: 2007-11-13
Classification: H04L

Abstract:
1. A computer system providing Internet protocol security without secure domain name resolution, the system comprising: a local domain name service (DNS) server that is communicatively coupled to a processor and that includes a secure Internet security protocol (IPSEC) cache, wherein the secure IPSEC cache comprises a plurality of cache entries, wherein each cache entry comprises a domain name and information that uniquely associates the cache entry with a particular application process or execution time, wherein the secure IPSEC cache is readable only by an Internet protocol (IP) processing layer of an operating system that controls execution of an application program by the processor; a security policy data store that is communicatively coupled to the IP processing layer; a computer-readable medium accessible to the processor and comprising one or more sequences of instructions which, when executed by the processor, cause the processor to carry out the steps of: