Patent ID: 8782399

Claim:
An automated method that extends the trust in established public key identity systems to domain name system (DNS) records by creating a cryptographic trail within an audited Secure Processing Environment (SPE), comprising the steps of: owner generating a request to add, delete, or modify domain name records digitally signed by the owner's private key and accompanied by corresponding digital certificate; transmission of the request to DNS Security Extensions (DNSSEC) service provider's SPE via the public Internet; cryptographic verification that the request has not been modified in transit inside the SPE; cryptographic validation of the signed request inside SPE against a pre-configured list of trusted certificates that attest to the owner's identity; authorization of the request against a pre-configured list of authorized administrators for a domain name associated with the owner inside the SPE drawn from public records; processing of the request inside SPE to update domain name records; digital signing of the updated records using DNSSEC inside the SPE using DNSSEC private keys associated with the domain name; publication of the updated domain name records outside SPE.