Patent ID: 8719900
Filing Date: 2014-05-06
Classification: H04L

Abstract:
1. A non-transitory computer-readable medium embodying a program executable in a computing device, the program comprising: code that authenticates a domain owner for purposes of domain name system (DNS) record modification using a first mechanism of authentication; code that receives a request to modify at least one DNS record associated with a first domain owned by the domain owner; code that validates the request by applying at least one policy to the request, the validation responsive to success of the authentication, the at least one policy prohibiting modifications of the DNS record that refer to an identifier that is outside of an infrastructure controlled by the domain owner while permitting modifications of the DNS record that is part of the first domain when the modified DNS record is part of a second domain also owned by the domain owner; code that denies the request to modify the at least one DNS record responsive to failure of the validation; code that authenticates the domain owner for purposes of policy configuration using a second mechanism of authentication for the domain owner, wherein the second mechanism of authentication for configuring the at least one policy is different than the first mechanism used for DNS record updates; code that receives a request to configure the at least one policy; and code that denies the request to configure responsive to failure of the authentication for purposes of policy configuration.