GRS Server Key Value Domain Name Resolution Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
DNS servers are vulnerable to hijacking, leading to potential interception of domain name resolution requests, resulting in fake IP addresses being returned to electronic devices, which can cause users to access incorrect or malicious resources, compromising network security and user privacy.
Innovation Solution
A method and device for performing domain name resolution by sending a key value to a Global Router Service (GRS) server, which returns multiple IP addresses, allowing the electronic device to randomly select a target IP address for accessing resources, thereby bypassing the need for direct DNS server interaction and enhancing security and load balancing.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Reliability
If DNS server is used for domain name resolution, then domain name to IP address conversion is achieved, but the DNS server is vulnerable to hijacking and returns fake IP addresses
Solution Approach 1:
The patent introduces a GRS server as an intermediary between the electronic device and the DNS server. The electronic device sends the key value to the GRS server, which then performs domain name resolution and returns the IP address. This intermediary architecture isolates the electronic device from direct interaction with potentially compromised DNS servers, thereby mitigating the security risk of DNS hijacking.
Solution Approach 2:
The patent segments the domain name resolution process into two independent parts: (1) the electronic device sends only the key value to the GRS server without exposing the full domain name, and (2) the GRS server performs the actual resolution. This segmentation reduces the attack surface and prevents direct exploitation of DNS vulnerabilities at the client side.
2Reliability
If GRS server is used for domain name resolution, then security against DNS hijacking is improved, but the system complexity increases
Solution Approach 1:
The GRS server is designed to handle multiple functions: it receives key values from electronic devices, performs domain name resolution, and returns IP addresses. By consolidating these functions into a single multi-functional server, the patent reduces the need for multiple separate components, thereby managing system complexity while maintaining security benefits.
3Productivity
If multiple IP addresses are returned by GRS server, then load balancing is achieved, but the selection process becomes more complex
Solution Approach 1:
The patent implements a self-service mechanism where the electronic device autonomously selects an IP address from the multiple IP addresses returned by the GRS server using a random selection algorithm. This self-service approach distributes the selection logic to the client side, avoiding the need for a complex centralized selection mechanism and simplifying the overall system architecture while still achieving load balancing.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
This application discloses a method and a device for performing domain name resolution by sending a key value to a GRS server, and relates to the field of mobile communications, to ensure proper business running on an electronic device, ensure network security, and protect user privacy. A specific solution is as follows: After receiving an input that is of a user and that is used to trigger an electronic device to provide a business service for the user by accessing a resource on a server deployed on the internet, the electronic device may obtain a key value and an identifier in response to the input, where the identifier may be an IP address or a domain name. In this case, the electronic device may send the key value to a GRS server identified by the identifier, so that the GRS server performs domain name resolution to return the IP address. Based on the returned IP address, the electronic device can access a resource on a server identified by the IP address, to provide the business service for the user.