DNS Name Resolution Relay Routing Against Traffic Analysis
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing DNS communication methods, despite encryption, are vulnerable to statistical analysis that can reveal user privacy, as entities on the communication path can associate destination addresses with visited websites, compromising user privacy.
Innovation Solution
Introduce a relay node between the client device and the recipient server, masking the recipient's identity by sending messages through the relay node's address, and apply scrambling instructions to messages, such as padding or fake connections, to obscure the traffic patterns.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If encrypted DNS mechanisms (DoT, DoD, DoH, DoQ) are implemented, then confidentiality of DNS communications is improved, but statistical analysis can still reveal user privacy through destination address association
Solution Approach 1:
The patent introduces a relay node as an intermediary between the client device and the recipient server. The relay node receives messages from the client device and forwards them to the recipient server, masking the actual destination address from statistical analysis while maintaining communication functionality. This intermediary breaks the direct association between source and destination that enables statistical profiling.
Solution Approach 2:
The communication path is segmented into multiple hops: client device → relay node → recipient server. By dividing the direct communication channel into separate segments, the patent prevents end-to-end statistical analysis while maintaining encrypted communication between each segment, thereby addressing the vulnerability to statistical analysis.
2Object-affected harmful factors
If relay nodes are introduced to mask recipient identity, then user privacy protection is improved, but device complexity and network infrastructure requirements increase
Solution Approach 1:
The relay node is designed to perform multiple functions: it acts as a message forwarder, applies scrambling instructions to messages, and maintains communication with both client devices and recipient servers. This multi-functionality reduces the need for separate specialized components, thereby managing complexity while providing comprehensive privacy protection.
Solution Approach 2:
The relay node autonomously applies scrambling instructions to messages without requiring complex external coordination. The node independently manages the privacy protection mechanisms, reducing the burden on client devices and simplifying the overall system architecture despite the added functionality.
Data Source
AI summary
A method for processing a first name resolution request originating from a client device is implemented by a name resolution server. It includes sending, to the client device, a response to the first request including at least one piece of information relating to a so-called recipient server resulting from a resolution of the first request. The method further includes sending, to the client device, a plurality of elements including: at least one address of at least one relay node selected by the name resolution server to which the client device must address all or part of its messages containing data intended for the recipient server; and at least one scrambling instruction to be applied by the client device to the messages before addressing them to the at least one relay node.