Deceptive Domain Name Detection via Identifier Translation

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

The existing methods to prevent deceptive domain name attacks, such as buying similar domain names or using SSL certificates, become ineffective with the expansion of international characters and character sets, making it difficult to distinguish between legitimate and illegitimate domain names, especially when characters outside of US/Western Europe sets are used.

Innovation Solution

A system and method that translates target domain names into identifiers and compares them to a domain name table to detect deceptively similar domain names, using similarity codes for characters and frequency information to prevent users from accessing unknown or unwanted websites.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a company buys all deceptively similar domain names to protect its own domain name, then the protection effectiveness is improved, but the cost and complexity increase significantly due to the expansion of international characters and character sets

Engineering Contradiction:
Improvedomain name protection effectivenessVSAvoiddomain name management complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary system consisting of a deceptive domain name detection service and a web browser plugin. This intermediary layer automatically detects deceptive domain names by translating them into identifiers and comparing against a domain name table, eliminating the need for companies to manually monitor and purchase every possible similar domain name while maintaining effective protection

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system enables self-service protection by automatically detecting and warning users about deceptive domain names through the browser plugin. The detection service operates autonomously, translating domain names into identifiers and comparing them against stored legitimate domain names without requiring manual intervention from the company or user

Inventive Principle:
Principle #25Self-service

2Reliability

If SSL certificates are used to verify web site authenticity, then security is improved, but the system becomes ineffective when domain names use international characters outside US/Western Europe character sets

Engineering Contradiction:
Improveweb site authentication securityVSAvoidsupport for international characters
Core Design Contradiction:
ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent changes the fundamental parameter for domain name comparison from character-by-character string matching to identifier-based matching. By translating domain names into identifiers that capture their essential characteristics and comparing these identifiers against a domain name table, the system can accurately distinguish legitimate from deceptive domain names regardless of the character set used, maintaining security while adapting to international characters

Inventive Principle:
Principle #35Parameter changes

3Reliability

If domain name restrictions based on national business databases are implemented, then deceptive domain name registration is prevented, but the system complexity and operational burden increase

Engineering Contradiction:
Improvedomain name registration integrityVSAvoidregistration system complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces an intermediary detection service that operates independently of the domain name registration system. This service translates domain names into identifiers and compares them against a domain name table to detect deception, providing a separate layer of protection that does not increase registration system complexity while maintaining registration integrity

Inventive Principle:
Principle #24Intermediary (Mediator)

Data Source

PatentUS7559085B1Detection for deceptively similar domain names
Publication Date: 2009.07.07 ORACLE AMERICAN INC
  • US7559085B1 patent drawing
  • US7559085B1 patent drawing
  • US7559085B1 patent drawing

AI summary

A system including a client configured to obtain a target domain name and an Internet service configured to translate the target domain name into a target identifier and compare the target identifier to a domain name table to obtain a similarity list.