DNS Firewall Provisioning for Secure Internet Circuit Setup

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Small businesses lack the technical expertise to configure Internet circuits and securely control employee online activities, leading to potential unauthorized access to prohibited websites.

Innovation Solution

A system and method for efficiently provisioning Internet circuits with a domain name system (DNS) firewall that automatically assigns IP addresses, stores tenant data, and processes DNS requests based on customer-defined categories, ensuring secure access control.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Ease of operation

If small businesses configure their own Internet circuits and DNS systems, then device complexity and operational difficulty increase, but technical expertise requirements also increase which small businesses lack

Engineering Contradiction:
Improveease of configuring Internet circuitVSAvoidcomplexity of DNS firewall system
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The system enables automatic self-provisioning where the DNS firewall system automatically configures itself upon receiving a provisioning request. The system extracts customer information and IP address space automatically, stores tenant data without manual intervention, and begins filtering DNS requests without requiring technical configuration by the small business owner.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The DNS firewall system is pre-configured with default security policies and category-based filtering rules before deployment. When provisioned, it automatically has the necessary configuration templates and filtering categories ready, eliminating the need for small businesses to perform complex setup procedures.

Inventive Principle:
Principle #10Preliminary action

2Reliability

If manual configuration of DNS firewall is implemented, then security control is improved, but time consumption and operational complexity increase

Engineering Contradiction:
Improvesecurity controlVSAvoidtime for provisioning
Core Design Contradiction:
ReliabilityVSLoss of time

Solution Approach 1:

The system performs automatic extraction of customer information and IP address space from provisioning requests, automatically stores tenant data in the DNS firewall system, and automatically begins security filtering without requiring manual configuration time from the business owner.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

The system automatically receives provisioning requests, processes them through automated configuration workflows, and confirms deployment status. This feedback loop eliminates manual intervention time while maintaining security controls through automated policy application.

Inventive Principle:
Principle #23Feedback

3Productivity

If automated provisioning is implemented, then productivity is improved, but automatic extraction and storage of customer information requires robust automated processing

Engineering Contradiction:
Improveprovisioning efficiencyVSAvoidautomation of customer information processing
Core Design Contradiction:
ProductivityVSExtent of automation

Solution Approach 1:

The DNS firewall system automatically extracts customer information and IP address space from provisioning requests without human intervention. The system autonomously processes the data, validates it, stores it as tenant data, and configures filtering rules based on the extracted information.

Inventive Principle:
Principle #25Self-service

Solution Approach 2:

Manual mechanical configuration processes are replaced with automated digital processing. The system uses automated data extraction, validation, and storage mechanisms that process provisioning information electronically without requiring manual data entry or configuration steps.

Inventive Principle:
Principle #28Mechanics substitution (Replace mechanical system)

Data Source

PatentUS20250365267A1Efficient provisioning of internet circuit and secure domain name system
Publication Date: 2025.11.27 LEVEL 3 COMMUNICATIONS LLC
  • US20250365267A1 patent drawing
  • US20250365267A1 patent drawing
  • US20250365267A1 patent drawing

AI summary

The present application describes systems and methods for automatically provisioning a domain name system (DNS) firewall service for an Internet circuit. In examples, customer premises equipment and a DNS firewall system are automatically configured to work with the Internet circuit without requiring technical knowledge or intervention by a customer.