Domain and IP Verification for Pharming Prevention
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access control systems are ineffective in preventing pharming attacks, as they rely solely on URL monitoring, which is insufficient when users enter valid URLs that are redirected to bogus sites through DNS manipulation or computer viruses.
Innovation Solution
A security management device and system that checks domain names and IP addresses against databases and secure DNS servers to verify site authenticity, inhibiting access to known bogus sites and redirecting users to authentic sites if necessary.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If access control is performed by monitoring only URLs, then the system is simple to operate, but it becomes ineffective against pharming attacks where users enter valid URLs that are redirected to bogus sites
Solution Approach 1:
The patent transitions from single-dimension URL monitoring to multi-dimensional verification by checking both domain names and IP addresses separately. The access control unit performs independent verification of domain names against domain information and IP addresses against address information, creating a two-dimensional security check that detects pharming attacks where URL monitoring alone fails
Solution Approach 2:
The patent segments the URL into two distinct components: domain name and IP address. Each component is verified independently through separate database queries - domain names are checked against domain information in the first database, while IP addresses are checked against address information in the second database. This segmentation allows detection of mismatches that indicate pharming attacks
2Reliability
If the system checks both domain names and IP addresses against databases, then protection against pharming is improved, but the processing time and system complexity increase
Solution Approach 1:
The patent pre-organizes security data into two separate databases: one containing domain information (domain names and their legitimate IP addresses) and another containing address information (IP addresses and their legitimate domain names). This preliminary structuring enables rapid parallel lookup operations during access verification, reducing the time penalty of multi-dimensional checking
Solution Approach 2:
The patent introduces separate database structures as intermediaries between the access control unit and the verification logic. The first database stores domain information and the second database stores address information, allowing the system to perform parallel independent queries without complex real-time computation, thus reducing processing time
Data Source
AI summary
The present invention provides a technique of preventing a user from being tricked into revealing personal information by pharming.Security server 50 checks whether a combination of a domain name and an IP address of WWW site 30 to be accessed by PC 10 is registered in access-permit DB 55a or access-inhibit DB 55b. Security sever 50 also checks whether the combination is registered in any of secure DNS servers 40 registered in secure DNS DB 55c. On the basis of a result of the checks, security server 50 controls an access by PC 10 to WWW site 30.