Secure Dynamic Address Resolution Protocol for Network Nodes
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
The Domain Name System (DNS) is vulnerable to security threats such as hijacking, where attackers can redirect users to malicious websites or intercept messages, due to its reliance on third-party systems, posing risks in web and email communications.
Innovation Solution
A secure dynamic address resolution and communication protocol that pairs nodes with authentication schemes, creates and updates DNS records, and ensures message transmission only after successful authentication, using local resolution without third-party DNS, and implements encryption and a 'kill-switch' for termination conditions.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Ease of operation
If a third-party DNS system is used for address resolution, then ease of operation is improved, but security is worsened due to hijacking and redirection vulnerabilities
Solution Approach 1:
The patent extracts the DNS resolution function from third-party systems and implements it locally within the communication protocol itself. Nodes maintain local DNS records and resolve addresses independently, removing the vulnerable third-party DNS component while preserving address resolution functionality.
Solution Approach 2:
The patent introduces authenticated DNS records as an intermediary mechanism between nodes. These records are created and updated through authenticated handshakes, serving as a secure mediator for address resolution without requiring external DNS infrastructure.
2Object-affected harmful factors
If local DNS records are created and updated dynamically, then security is improved by preventing hijacking, but device complexity increases due to authentication and record management requirements
Solution Approach 1:
The patent merges the authentication mechanism with the DNS record creation and update processes. The same authenticated handshake that establishes communication also creates and updates DNS records, combining multiple functions into a single integrated process rather than separate operations.
Solution Approach 2:
Nodes perform their own authentication and DNS record management independently through peer-to-peer handshakes. Each node maintains its own DNS records and resolves addresses locally without requiring external authentication services, making the system self-sufficient.
3Object-affected harmful factors
If authentication is required before message transmission, then security is improved, but productivity decreases due to additional authentication steps
Solution Approach 1:
Authentication is performed in advance during the initial handshake phase, before any message transmission occurs. The DNS records and authentication credentials are established beforehand, so that once authentication is complete, messages can be transmitted without repeated authentication delays.
Solution Approach 2:
The patent combines authentication, DNS record creation, and communication establishment into a single integrated handshake process. This merging eliminates separate authentication steps that would otherwise slow down message transmission, as all security checks are performed concurrently during the initial connection phase.
Data Source
AI summary
The present invention is directed to systems and methods for providing secure dynamic address resolution and communication. Accordingly, a node may include processor and memory having instructions thereon, that when executed, cause the node to pair with another node. The pairing may include creating a DNS record on the node including a current address associated with the second node, this current address may be dynamically updated. The instructions may further allow the node to transmit a message to the second node, based on a resolved address from the DNS record on the first node. Authentication, dynamic message encryption and the provision of a DNS cache may further be implemented on the node.