Off-Chain Domain Record Resolution Using Blockchain Asset Verification
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
DNS records in Web2 can be maliciously modified by anyone with authorization, compromising domain name security and integrity.
Innovation Solution
Associate DNS records for Web2 domains with blockchain assets and restrict modifications to authorized users who can sign with their blockchain public key, using cryptographic verification to ensure authenticity.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If DNS records are made accessible and modifiable by authorized users, then domain name management flexibility is improved, but security and integrity are worsened due to potential malicious modifications
Solution Approach 1:
The patent introduces a blockchain as an intermediary layer between DNS record storage and modification operations. The blockchain stores cryptographic hashes of DNS records and requires cryptographic proof (digital signatures) for any modifications. This intermediary mechanism allows authorized users to modify DNS records while the blockchain verifies the authenticity of modifications through cryptographic validation, thus maintaining both operational flexibility and record integrity.
2Device complexity
If DNS records are stored centrally in DNS servers, then access and modification is simplified, but vulnerability to malicious modification by authorized users increases
Solution Approach 1:
The patent implements preliminary cryptographic hashing of DNS records before they are stored or modified. The blockchain stores the hash of the DNS record in advance, creating a cryptographic commitment to the original state. Before allowing any modification, the system performs preliminary verification by comparing the hash of the proposed modification against the stored hash, ensuring that only authenticated modifications proceed. This preliminary cryptographic validation prevents malicious modifications while maintaining centralized DNS functionality.
3Reliability
If authorization mechanisms are added to DNS record modification, then security is improved, but system complexity increases
Solution Approach 1:
The patent replaces traditional mechanical authorization systems (username/password, access control lists) with cryptographic mechanisms. Instead of relying on centralized authentication servers and complex permission management, the system uses public-key cryptography where users sign modification requests with their private keys. The blockchain network verifies these cryptographic signatures to authorize modifications. This substitution of cryptographic mechanisms for mechanical authorization systems enhances security while actually reducing operational complexity, as cryptographic verification is more reliable and harder to compromise than traditional authorization systems.
Data Source
AI summary
According to a present invention embodiment, a system for managing domain information for an off-chain domain comprises one or more memories and at least one processor coupled to the one or more memories. The system associates the domain information for the off-chain domain with a blockchain asset. The domain information is retrieved from a blockchain based on the blockchain asset. Embodiments of the present invention further include a method and computer program product for managing domain information for an off-chain domain in substantially the same manner described above.


