DNS Query Verification for Reliable Network Location Detection

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Determining whether a mobile computing device is inside a particular network can be unreliable due to its mobility and varying connectivity.

Innovation Solution

A computing device generates a DNS query and checks for a verified DNS response, determining if it is inside a network by ensuring the response has an expected value and is digitally signed by a trusted authority.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If traditional network detection methods are used for mobile devices, then the device can operate in different manners based on network location, but the determination of whether the device is inside a network becomes unreliable

Engineering Contradiction:

Improvenetwork location determination reliabilityVSAvoiddevice operational adaptability

Core Design Contradiction:

ReliabilityVSAdaptability or versatility

Solution Approach 1:

The patent introduces DNS (Domain Name System) as an intermediary mechanism to reliably determine network location. Instead of directly detecting physical network presence, the system uses DNS queries and responses as a mediator to indirectly and reliably determine whether the device is inside a corporate network, resolving the unreliability of traditional detection methods while maintaining operational adaptability

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If DNS queries are used to determine network location, then reliable determination is achieved, but the system requires verification mechanisms including digital signatures

Engineering Contradiction:

Improvenetwork location determination reliabilityVSAvoidverification system complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent implements preliminary verification actions by pre-configuring expected DNS response values and pre-establishing trusted authority digital signatures. The system performs verification checks (expected value matching and digital signature validation) as standard preliminary steps in the DNS response processing flow, ensuring reliability without requiring complex runtime decision-making

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system employs feedback mechanisms where DNS responses are verified against expected values and digital signatures, and the results feed back into the network location determination logic. This closed-loop verification provides reliable feedback confirmation of network status while maintaining manageable system complexity through structured verification protocols

Inventive Principle:

Principle #23Feedback

Data Source

PatentUS9722966B2DNS-based determining whether a device is inside a network

Publication Date: 2017.08.01 MICROSOFT TECHNOLOGY LICENSING LLC

AI summary

In a computing device a domain name system (DNS) query is generated and sent, and a check is made as to whether a verified DNS response to the DNS query is received. The computing device is determined to be inside a particular network if a verified DNS response is received, and is determined to be outside that particular network if a verified DNS response is not received. A DNS response can be determined to be verified if both the DNS response has an expected value and the DNS response is digitally signed by a trusted authority, and otherwise can be determined to be not verified.