Dynamic DNS Protocol Switching for Network Availability
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Domain Name System (DNS) protocols are vulnerable to tracking and spoofing, and while DNS secure resolution protocols like DNS over HTTPS (DoH) and DNS over TLS enhance security, they can introduce limitations that affect network availability, such as reduced data transfer rates or lack of network access.
Innovation Solution
Implementing a method and system that dynamically connect to a DNS secure resolution protocol, such as DoH, based on conditions like data transfer rate, access point security, and resource access, ensuring that if network availability decreases, the system switches to an alternative protocol to maintain connectivity and security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DNS secure resolution protocols (DNS over HTTPS, DNS over TLS) are used to enhance confidentiality and security, then security against tracking and spoofing is improved, but network availability decreases due to reduced data transfer rates or lack of network access
Solution Approach 1:
The system dynamically changes the protocol parameter (switching between secure DNS protocols and standard DNS) based on network conditions. When network availability drops below a threshold, the system transitions from using encrypted DNS protocols to standard unencrypted DNS, thereby adapting the security level to current network conditions while maintaining connectivity
Solution Approach 2:
The invention implements a dynamic selection mechanism that continuously monitors network availability and adjusts the DNS protocol usage accordingly. The protection module evaluates network conditions in real-time and dynamically switches between secure and standard DNS protocols, making the system adaptable rather than static
2Loss of information
If DNS secure resolution protocols are connected to ensure encrypted DNS queries, then confidentiality is enhanced, but network access may be blocked or data transfer rate reduced
Solution Approach 1:
The protection module acts as an intermediary between the DNS client and DNS servers. It intercepts DNS queries, evaluates network conditions, and decides whether to route queries through secure encrypted protocols or standard unencrypted protocols. This intermediary function allows the system to balance confidentiality requirements with network accessibility
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed herein are systems and methods for connecting a Domain Name System (DNS) secure resolution protocol. In one example, an exemplary method comprises, by a protection module, determining a DNS query from a client, determining a fulfillment of at least one condition for connecting the DNS secure resolution protocol, wherein the at least one condition is obtained from a database, and connecting the DNS secure resolution protocol for the client when the at least one condition for connecting the DNS secure resolution protocol is fulfilled.