Numeric Pattern Normalization for DNSSEC Signatures
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The deployment of DNSSEC and use of cryptographic signatures in the growing internet environment is problematic due to increased computational loads and larger signed answers, which strain DNS servers and networks.
Innovation Solution
A system for numeric pattern normalization of cryptographic signatures is implemented, where a signature server normalizes messages by defining ignore and tokenization ranges, replacing specific values with token values, generating a hash, and encrypting it with a private key, allowing for efficient cryptographic signing and verification.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If a unique cryptographic signature is created for each signed message, then message authentication and integrity are ensured, but computational load on DNS servers increases significantly
Solution Approach 1:
Multiple individual cryptographic signatures are merged into a single aggregated signature. The patent combines multiple DNSSEC signatures for different resource records into one unified signature structure, allowing a single signature to authenticate multiple messages simultaneously, thereby reducing computational load while maintaining authentication reliability
Solution Approach 2:
The aggregated cryptographic signature serves multiple functions at once. A single signature object can authenticate multiple different resource records and DNS responses, making the signature multi-functional rather than single-use, which directly addresses the computational overload problem
2Reliability
If a unique cryptographic signature is created for each signed message, then message integrity is verified, but the size of signed answers increases
Solution Approach 1:
Multiple signature components are merged into a single compact aggregated signature structure. Instead of transmitting separate signatures for each resource record, the patent creates one unified signature that contains all necessary authentication information, significantly reducing the volume of data transmitted in DNS responses
3Productivity
If numeric pattern normalization is applied to messages, then computational load is reduced and scalability is enhanced, but message processing complexity increases
Solution Approach 1:
Numeric pattern normalization is performed in advance before cryptographic signing. The patent pre-processes DNS responses by normalizing numeric patterns (converting to canonical form, handling compression pointers) before the signing operation, so that the actual signing process works on simplified, standardized data, reducing computational complexity during the critical signing phase
Data Source
AI summary
A system for numeric pattern normalization for cryptographic signatures is provided. The system includes a resolving client, and an at least one signature server. The at least one signature server includes at least one processor and non-transitory computer readable media having encoded thereon computer software comprising a set of instructions executable by the at least one processor. The set of instructions may be executed by the signature server to generate a message to be transmitted to a resolving client, normalize the message via numeric pattern normalization, generate a hash value for the normalized message, and generate a cryptographic signature based on the hash value. The signature server may then generate a signed message having the message signed with the cryptographic signature, and transmit the signed message to the resolving client.