Selective DNS Proxying via Subscriber Preference Intermediaries
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current Domain Name System (DNS) technologies face challenges in efficiently processing DNS requests while respecting user and network preferences, particularly in scenarios where certain domains need to be blocked or proxied, and allowing selective access based on subscriber preferences.
Innovation Solution
Implementing a method within the DNS system that allows for selective proxying and blocking by using subscriber information to redirect DNS requests, employing a recursive DNS cluster with cache storage and subscriber databases to manage domain name records and user preferences, enabling the generation of different responses based on request identifiers and flags associated with domain names.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If traditional DNS processing is used to resolve domain names to IP addresses, then DNS resolution functionality is provided, but the system cannot selectively block or proxy specific domains based on subscriber preferences
Solution Approach 1:
The patent introduces a block page service and bypass service as intermediary components between the client and the target domain. When a domain is blocked, the DNS system redirects requests to a block page service, which then redirects authenticated users to a bypass service that proxies requests to the target domain. This intermediary approach enables selective blocking and proxying without fundamentally redesigning the entire DNS infrastructure.
Solution Approach 2:
The patent segments the DNS system into multiple specialized services: recursive DNS nameservers for standard resolution, block page services for handling blocked domains, and bypass services for authenticated proxying. This segmentation allows each component to perform its specific function efficiently while collectively providing the selective domain control capability.
2Productivity
If all DNS requests are processed through recursive resolution, then complete domain name resolution is achieved, but processing efficiency decreases due to repeated queries
Solution Approach 1:
The patent implements DNS caching at recursive nameservers, where previously resolved domain name to IP address mappings are stored. When the same domain is queried again, the cached result is returned immediately without performing a new recursive resolution process. This preliminary action of caching frequently accessed domain information significantly improves processing efficiency while maintaining resolution accuracy through the established DNS hierarchy.
3Ease of operation
If domains are blocked without exception, then content control is enforced, but legitimate access requests from authenticated users are incorrectly denied
Solution Approach 1:
The patent implements dynamic access control where the blocking behavior changes based on user authentication state. Initially, blocked domains are inaccessible to all users. However, when users authenticate through the bypass service, their access rights are dynamically updated, allowing them to proxy requests to previously blocked domains. This dynamic adjustment ensures that access control adapts to individual user authorization levels rather than applying static blocking rules.
Solution Approach 2:
The system incorporates feedback mechanisms where authenticated users receive confirmation of their access rights, and the bypass service uses this authentication feedback to determine whether to proxy requests to blocked domains. The system continuously monitors authentication status and adjusts access decisions based on this feedback, ensuring that only properly authorized users can access blocked content.
Data Source
AI summary
Systems and methods for processing requests for domain name information in accordance with subscriber information are provided. A request for domain name information can be correlated with subscriber preferences to resolve the domain name information. Domain names may be flagged for blocking or proxying by one or more subscriber preferences. In response to a flagged domain name, a client device can be redirected to a web server that can function as proxy on behalf of the user for accessing the flagged domain. In one example, user preferences and/or network preferences can be used to determine whether a particular user can bypass a blocking preference and access the flagged domain using the proxy.