Patent Document ID: 9967290
Application ID: 15075506

Base Claim:
1. A method of digitally securing a digital object from a first user in a first domain to a second user in a second domain using a domain name system (“DNS”) provider, the method comprising: accessing, at a client device of the first user, a client-side local policy, wherein the local policy comprises one or more zones managed by one or more DNS providers and secured by DNS-based authentication of named entities (“DANE”) using DNS security extensions (“DNSSEC”); constructing, by at least one hardware processor of the client device, a DNS query for a cryptographic credential for the second user based, at least in part, on a zone of the one or more zones in the local policy; providing, to a DNS provider of the one or more DNS providers through a DNS resolver over a network, a request for the cryptographic credential for the second user; obtaining, over a network, the cryptographic credential for the second user from a DNS provider of the one or more DNS providers; digitally securing, by at least one hardware processor of the client device, the digital object using the cryptographic credential; and providing, by the client device over a network, the digital object that is secured using the cryptographic credential to the second user.

---

Claim 2:
2. The method of claim 1 , wherein the cryptographic credential is a Secure/Multipurpose Internet Mail Extensions (“S/MIME”) key or a Pretty Good Privacy (“PGP”) key.