Decentralized DNS Blockchain Domain Registration
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The current Internet infrastructure is vulnerable to attacks due to the reliance on centralized Certificate Authorities (CAs) for secure communication, which can be compromised, leading to inadequate security against sophisticated cyber threats.
Innovation Solution
A decentralized Domain Name System (DNS) using blockchain technology records domain registrations and security transactions, allowing for secure communication between nodes through public keys and certificates stored on a blockchain, eliminating the need for traditional CAs.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a centralized Certificate Authority (CA) system is used for secure communication, then authentication and security certificate issuance are streamlined, but the system becomes vulnerable to attacks and compromise
Solution Approach 1:
The patent segments the centralized CA authority into multiple distributed nodes across a blockchain network. Instead of relying on a single CA, security functions are distributed among numerous nodes, each capable of issuing and verifying certificates independently. This segmentation eliminates the single point of failure and reduces vulnerability to attacks while maintaining authentication capabilities.
Solution Approach 2:
The patent introduces a blockchain ledger as an intermediary layer between domain names and security certificates. The blockchain acts as a trusted mediator that records and verifies domain registrations and certificate issuances without requiring a centralized CA. This intermediary structure enables secure communication while distributing trust across the network.
2Adaptability or versatility
If multiple Certificate Authorities (1200+ CAs) are used to provide security certificates, then domain authentication coverage is improved, but the risk of compromise increases as any single CA can be attacked or corrupted
Solution Approach 1:
The patent divides the CA function into multiple independent nodes distributed across the blockchain network. Each node can issue certificates for domains, providing comprehensive coverage similar to the 1200+ CA model. However, unlike the traditional model where any single CA compromise undermines security, the blockchain structure ensures that compromise of individual nodes does not affect the overall system security.
Solution Approach 2:
The patent applies local quality by allowing different blockchain nodes to specialize in specific domain areas or geographic regions. Each node can maintain local security policies and verification procedures tailored to its specific context, while still contributing to the overall decentralized certificate issuance ecosystem. This approach maintains high adaptability while enhancing security through distributed verification.
3Adaptability or versatility
If DNS and certificate-based security services are provided by independent parties, then service specialization is improved, but system complexity and the number of involved parties increase
Solution Approach 1:
The patent merges the DNS registration process and security certificate issuance into a single integrated workflow on the blockchain. When a domain is registered on the blockchain, the domain name, IP address, and security certificates are all recorded together in the same transaction. This eliminates the need for separate registrars and CAs, reducing system complexity while maintaining service specialization through the blockchain's inherent capabilities.
Solution Approach 2:
The blockchain system performs multiple functions simultaneously: it acts as a domain name registry, a certificate authority, and a verification service. This multi-functionality consolidates what were previously separate independent services into a single unified platform, reducing the number of involved parties while maintaining the ability to provide specialized security and DNS services.
Data Source
Figure 1
Figure 2
Figure 3a~3b
AI summary
A computer-implemented method for secure de-centralized domain name system, the method comprising: recording a domain registration transaction to a blockchain, the domain registration transaction comprising a domain name, a domain primary key corresponding to a domain public key and domain certificate information for a server node; recording a domain security transaction, comprising the domain public key, to the blockchain to generate a domain name record comprising the domain name, an associated IP address, the domain public key and the domain certificate information, wherein the domain security transaction being signed using the domain primary key; transmitting, by a client node, a domain name request to a domain name node; receiving, by the client node, a domain name response from the domain name node, the domain name response comprising the domain public key, the domain certificate information and the associated IP address retrieved from the domain name record of the blockchain; and initiating a secure communication between the client node and the server node using at least one of the domain public key and the domain certificate information.