dns anti-hijacking communication method

Abstract

The invention provides an anti-hijack communication method of a DNS (Domain Name System), which relies on a router and has excellent security. The anti-hijack communication method comprises the following processes that: a user sends a domain name resolution request, after the router receives the request, the router does not directly forward outwards, instead, the following judgments are made, if the router has no DNS cache or the DNS cache has no relevant record, and an anti-hijack DNS server is arranged in the router, the router is communicated with the anti-hijack DNS server, and a communication process is as follows: if the router and the anti-hijack DNS server perform safety communication handshake, the following process is executed; otherwise, the safety communication handshake is established firstly; and the router and the anti-hijack DNS server both utilize keys established by the safety communication handshake to encrypt and decrypt sending information and receiving information respectively so as to carry out communication, the information, which is sent to the anti-hijack DNS server by the router, at least comprises a requested domain name, and the information, which is sent to the router by the anti-hijack DNS server, is information fed back by the information, which is sent to the anti-hijack DNS server by the router.

Description

Technical field [0001] The invention relates to the technical field of the Internet, in particular to a DNS anti-hijacking communication method. Background technique [0002] DNS (Domain Name System, Domain Name System), a distributed database on the Internet as a mapping between domain names and IP addresses, enables users to access the Internet more conveniently without having to remember the IP number string that can be directly read by the machine. Through the host name, the process of finally obtaining the IP address corresponding to the host name is called domain name resolution (or host name resolution). [0003] DNS hijacking brings losses to customers from time to time, sometimes even causing irreparable losses. This is well known in the industry. In order to prevent DNS hijacking, the industry has proposed many solutions, such as publication number CN 102790807A, publication number CN 102577303 A and other related patent applications disclose technical solutions, but non...

AI Technical Summary

Problems solved by technology

[0003] It is well known in the industry that DNS is hijacked and causes losses to customers, sometimes even causing irreparable losses. In order to prevent DNS from being hijacked, the industry has proposed many solutions, such as publication number CN 102790807A, publication number CN 102577303 A and other related patent applications disclose technical solutions, but they do not make full use of the role of routers in the existing Internet architecture, such as figure 1 As shown, the router itself does not do any processing, but directly sends information in plain text

Images