NAT-Based Oblivious DNS Routing Without Proxy Latency

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

Existing technologies require an intermediary proxy device for implementing Oblivious Domain Name System (DNS) traffic over Hypertext Transfer Protocol Secure (HTTPS), leading to increased latency and compromising user privacy.

Innovation Solution

The system integrates Network Address Translation (NAT) devices within telecommunications networks to perform DNS operations directly, eliminating the need for a separate proxy device by collapsing these functions into the NAT device, thereby reducing latency and enhancing privacy by shielding user identifying information.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If an intermediary proxy device is used for Oblivious DNS traffic over HTTPS, then user privacy is protected, but latency increases

Engineering Contradiction:

Improveuser privacy protectionVSAvoidDNS resolution latency

Core Design Contradiction:

ReliabilityVSLoss of time

Solution Approach 1:

The patent combines the functions of the intermediary proxy device with the NAT device into a single integrated component. The NAT device performs both address translation and oblivious DNS resolution, eliminating the need for separate proxy devices and reducing the number of network hops required for DNS requests.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The NAT device is enhanced to perform multiple functions: traditional IP address translation, HTTPS termination, and oblivious DNS resolution. This multi-functional approach allows a single device to handle both privacy protection and DNS resolution efficiently without requiring dedicated proxy infrastructure.

Inventive Principle:

Principle #6Universality (Multi-functionality)

2Reliability

If an intermediary proxy device is used for Oblivious DNS traffic, then security is improved, but device complexity increases

Engineering Contradiction:

Improvedigital securityVSAvoidnetwork architecture complexity

Core Design Contradiction:

ReliabilityVSDevice complexity

Solution Approach 1:

The patent merges the intermediary proxy functionality into the existing NAT device, consolidating security functions into a single network component. This integration reduces the overall complexity of the network architecture by eliminating separate proxy devices while maintaining security protections.

Inventive Principle:

Principle #5Merging (Combining)

Solution Approach 2:

The NAT device autonomously performs DNS resolution on behalf of user devices without requiring external proxy intervention. The device uses its own resources and capabilities to provide oblivious DNS services, reducing dependency on additional network components.

Inventive Principle:

Principle #25Self-service

3Loss of time

If NAT device performs DNS operations directly, then latency is reduced, but the device must handle additional processing load

Engineering Contradiction:

ImproveDNS resolution latencyVSAvoidNAT device processing load

Core Design Contradiction:

Loss of timeVSUse of energy by moving object

Solution Approach 1:

The NAT device performs DNS resolution operations directly as part of its normal network traffic processing flow, eliminating the need for separate proxy device communication. This preliminary integration of DNS functionality into the NAT device's core operations reduces latency by avoiding additional network hops and intermediate processing steps.

Inventive Principle:

Principle #10Preliminary action

Data Source

PatentUS20250392563A1System and method for reducing latency and improving security in oblivious domain name system traffic

Publication Date: 2025.12.25 T MOBILE INNOVATIONS LLC

AI summary

Aspects herein provide systems, devices, methods, and media for leveraging a carrier device in a telecommunications network in order to implement Oblivious Domain Name System (DNS) traffic over Hypertext Transfer Protocol Secure (HTTPS), without requiring an intermediary proxy device. In aspects, a carrier device modifies DNS requests and DNS responses to anonymize identifying information prior to receipt by a DNS resolver and/or DNS server.