Information Processing System for Selective DNS Name Resolution

Resolve Bottlenecks,
Find Innovative SolutionsGenerate Solutions

Solution Overview

Problem

The encryption of DNS over HTTPS (DoH) prevents effective determination of access permission using fully qualified domain names (FQDNs), leading to increased system load and unnecessary access prohibitions when relying solely on destination information.

Innovation Solution

An information processing system that associates destination and operation information with access destination systems, allowing selective name resolution based on user input, thereby reducing system load and preventing unnecessary access prohibitions.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Measurement precision

If name resolution is performed for every access determination, then access control accuracy is improved, but system load increases

Engineering Contradiction:

Improveaccess control accuracyVSAvoidsystem load

Core Design Contradiction:

Measurement precisionVSProductivity

Solution Approach 1:

The system performs name resolution in advance and stores the resolved addresses in memory. When access determination is needed, the pre-resolved address is retrieved from memory instead of performing name resolution again, thereby reducing system load while maintaining access control accuracy.

Inventive Principle:

Principle #10Preliminary action

Solution Approach 2:

The system selectively performs name resolution only when the required information is not already stored in memory, rather than always performing resolution or never performing it. This conditional approach optimizes the balance between accuracy and load.

Inventive Principle:

Principle #3Local quality

2Speed

If access determination is based only on destination information, then processing speed is improved, but false prohibitions occur

Engineering Contradiction:

Improveprocessing speedVSAvoidaccess determination accuracy

Core Design Contradiction:

SpeedVSReliability

Solution Approach 1:

The system combines destination information with operation information to make access determination. By merging these two types of information, the system achieves both fast processing (through efficient data structure) and accurate determination (by considering multiple factors).

Inventive Principle:

Principle #5Merging (Combining)

Data Source

PatentUS20250300983A1Information processing system, non-transitory computer readable medium, and information processing method

Publication Date: 2025.09.25 FUJIFILM BUSINESS INNOVATION CORP

AI summary

An information processing system includes a processor and a memory. The memory is configured to store information indicating a destination of an access destination system and information indicating an operation prohibited for the access destination system in an associated manner, and the processor is configured to: in a case where an access destination system and an operation to be performed on the system are designated by a user, when information indicating a destination of the system designated by the user and information indicating the operation designated by the user are not stored in the memory in an associated manner, request a name resolution system to perform name resolution based on the information indicating the destination of the system designated by the user and access the system according to an address acquired in response to the request; and when the information indicating the destination of the system designated by the user and the information indicating the operation designated by the user are stored in the memory in an associated manner, not request a name resolution system to perform name resolution based on the information indicating the destination of the system designated by the user.