Anti-hijack communication method of DNS (Domain Name System)

Abstract

The invention provides an anti-hijack communication method of a DNS (Domain Name System), which relies on a router and has excellent security. The anti-hijack communication method comprises the following processes that: a user sends a domain name resolution request, after the router receives the request, the router does not directly forward outwards, instead, the following judgments are made, if the router has no DNS cache or the DNS cache has no relevant record, and an anti-hijack DNS server is arranged in the router, the router is communicated with the anti-hijack DNS server, and a communication process is as follows: if the router and the anti-hijack DNS server perform safety communication handshake, the following process is executed; otherwise, the safety communication handshake is established firstly; and the router and the anti-hijack DNS server both utilize keys established by the safety communication handshake to encrypt and decrypt sending information and receiving information respectively so as to carry out communication, the information, which is sent to the anti-hijack DNS server by the router, at least comprises a requested domain name, and the information, which is sent to the router by the anti-hijack DNS server, is information fed back by the information, which is sent to the anti-hijack DNS server by the router.

Description

technical field [0001] The invention relates to the technical field of the Internet, in particular to a DNS hijacking prevention communication method. Background technique [0002] DNS (Domain Name System, Domain Name System), a distributed database on the Internet as a mapping between domain names and IP addresses, enables users to access the Internet more conveniently, without having to remember IP numbers that can be directly read by machines. The process of finally obtaining the IP address corresponding to the host name through the host name is called domain name resolution (or host name resolution). [0003] It is well known in the industry that DNS is hijacked and causes losses to customers, and sometimes even causes irreparable losses. In order to prevent DNS from being hijacked, many solutions have been proposed in the industry, such as publication number CN 102790807 A. No. CN 102577303 A and other related patent applications disclose technical solutions, but they ...

AI Technical Summary

Problems solved by technology

[0003] It is well known in the industry that DNS is hijacked and causes losses to customers, and sometimes even causes irreparable losses. In order to prevent DNS from being hijacked, many solutions have been proposed in the industry, such as publication number CN 102790807 A. No. CN 102577303 A and other related patent applications disclose technical solutions, but they all do not make full use of the role of routers in the existing Internet architecture, such as figure 1 As shown, the router itself does not do any processing directly, but sends information in plain text

Images