DNS-Based Security Seal Verification for Web Trust
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing security seals on the Internet lack efficient methods for verifying web site security and providing users with reliable trust indicators, as they do not effectively display information about malware scanning, vulnerability scanning, and SSL certificate status in search results.
Innovation Solution
A method and system that utilize DNS queries to verify web site trust services, such as SSL certificates, by parsing DNS queries, accessing DNS zone files, and transmitting identifiers to display security seals next to search results, leveraging DNS infrastructure for rapid and scalable verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If traditional security seal verification methods are used, then security verification can be provided, but the verification process is slow and not scalable
Solution Approach 1:
The patent introduces DNS as an intermediary mechanism to verify security seals. Instead of directly querying verification servers, the system uses DNS queries to resolve security seal domains, leveraging the existing DNS infrastructure to provide fast and scalable verification. This intermediary approach maintains verification reliability while dramatically improving speed.
Solution Approach 2:
The patent makes the DNS system multi-functional by using it not only for domain name resolution but also for security seal verification. By encoding verification information in DNS records (such as TXT records), the system leverages the universal DNS infrastructure for both traditional naming functions and security verification, achieving scalability without requiring a separate verification system.
2Reliability
If security seal information is displayed for all websites, then user trust is improved, but maintenance costs and system complexity increase
Solution Approach 1:
The patent implements a self-service verification mechanism where websites automatically prove their security seal status through their DNS records. The verification system simply queries the DNS for the security seal domain, and the DNS response itself contains the verification information. This eliminates the need for complex centralized management, database maintenance, and manual verification processes.
Solution Approach 2:
The patent extracts the verification information from complex centralized databases and embeds it directly in the DNS records. This extraction simplifies the verification system to basic DNS queries while maintaining the ability to provide trustworthy security indicators. The verification data is taken out from the traditional verification server architecture and placed in the distributed DNS system.
Data Source
AI summary
A method of providing web site verification information to a user can include receiving a DNS query including a host name and a seal verification site name, parsing the DNS query, and extracting the host name from the DNS query. The method also can include accessing a DNS zone file including a list of Trust Services customers and determining if the host name is associated with a Trust Services customer in the list of Trust Services customers. The method further can include transmitting a positive identifier to the requester if the host name is associated with a Trust Services customer and transmitting a negative identifier to the requester if the host name is not associated with a Trust Services customer. In a specific embodiment, the Trust Services include issuance of digital certificates.