Domain Name Fractional Authorization for Secure DNS Modification

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing network identifier infrastructure systems lack mechanisms for fractional control and partial modification of domain names, leading to security vulnerabilities and inefficiencies in managing network resources.

Innovation Solution

Implementing a blockchain-based system that allows for fractional control and partial modification of domain names by storing representations of domain names with multiple entities, enabling authorization and refusal of modifications through smart contracts, and providing interfaces for entities to manage domain name system data.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If a single entity controls a domain name, then modification decisions are quick and simple, but security vulnerabilities arise from lack of authorization checks

Engineering Contradiction:

ImprovesecurityVSAvoidcontrol mechanism

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent segments domain name control authority into multiple independent entities (registrant, registrar, registry, parent domain holder) rather than concentrating it in a single entity. Each entity holds a portion of the control authority and must authorize modifications collectively, thereby improving security through distributed authorization while managing complexity through defined roles and workflows.

Inventive Principle:

Principle #1Segmentation

Solution Approach 2:

The patent introduces an intermediary authorization mechanism that mediates between multiple control entities and the domain name modification process. This intermediary system manages the complex interactions by establishing structured authorization checks and approval workflows, allowing security improvements without overwhelming system complexity.

Inventive Principle:

Principle #24Intermediary (Mediator)

2Reliability

If multiple entities share control of a domain name, then security is improved through collective authorization, but modification efficiency decreases due to coordination requirements

Engineering Contradiction:

Improveauthorization securityVSAvoidmodification speed

Core Design Contradiction:

ReliabilityVSProductivity

Solution Approach 1:

The patent implements dynamic authorization thresholds and workflows that can adapt to different modification types and contexts. Not all modifications require the same level of authorization; the system dynamically adjusts the number and type of entities that must approve changes based on the specific modification being requested, thereby maintaining security while improving efficiency for routine operations.

Inventive Principle:

Principle #15Dynamics

Solution Approach 2:

The patent changes the parameters of control by introducing configurable authorization levels, time-based approvals, and context-dependent requirements. These parameter changes allow the system to balance security and efficiency by adjusting the stringency of authorization checks based on the specific modification scenario, rather than applying a fixed high-barrier approach to all changes.

Inventive Principle:

Principle #35Parameter changes

3Adaptability or versatility

If traditional centralized DNS management is used, then system simplicity is maintained, but security vulnerabilities and lack of decentralized control persist

Engineering Contradiction:

Improvedecentralized control capabilityVSAvoidinfrastructure structure

Core Design Contradiction:

Adaptability or versatilityVSDevice complexity

Solution Approach 1:

The patent creates a universal authorization framework that can be applied across different domain name systems and hierarchical levels. The same core authorization mechanisms work whether controlling a top-level domain, a second-level domain, or subdomains, providing adaptable decentralized control while reusing common infrastructure components to manage complexity.

Inventive Principle:

Principle #6Universality (Multi-functionality)

Solution Approach 2:

The patent adds a new dimension of control by introducing vertical authorization layers across the domain name hierarchy (from registrant up through registrar, registry, to parent domain holders) rather than relying solely on horizontal centralized control. This multi-dimensional authorization structure enables decentralized control while organizing complexity through clear hierarchical relationships.

Inventive Principle:

Principle #17Another dimension (Dimensionality change)

Data Source

PatentUS12506702B1Authorization and refusal of modification, and partial modification ability, of a network identifier

Publication Date: 2025.12.23 VERISIGN INC

AI summary

Systems, methods, and computer products for providing fractional control of a domain name by a plurality of entities enable operations that may include: providing an executable program for storage on a blockchain, the executable program configured to store a representation of the domain name in association with a plurality of identifications that each correspond to an entity that has a fractional control of the domain name; indicating, to the program, that the domain name is available for fractional control; receiving a message that includes the representation of the domain name and indications of a plurality of blockchain addresses, which are stored by the program as the plurality of identifications; and storing, in a domain name registration database, a representation of a fractional control status of the domain name. Each fractional control of the domain name may enable an authorization or a refusal of a modification related to the domain name.