Top-Level Domain Control on Blockchain Through DNSSEC Trust Chains

Resolve Bottlenecks,
Find Innovative Solutions
Generate Solutions

Solution Overview

Problem

Existing network identifier systems, such as DNS, lack a secure and efficient mechanism to associate human-friendly top level domain names with blockchain addresses, making it difficult for users to interact with blockchain transactions using memorable identifiers instead of numerical blockchain addresses.

Innovation Solution

A system and method to associate top level domain names with blockchain addresses by establishing a trust chain validated through DNSSEC mechanisms, allowing the domain names to be linked with blockchain addresses and stored on the blockchain, enabling users to interact with blockchain transactions using domain names.

Engineering Contradictions & Design Principles

VSEngineering Contradiction Analysis

1Reliability

If DNSSEC mechanisms are used to establish trust chains for associating domain names with blockchain addresses, then security and reliability are improved, but system complexity increases

Engineering Contradiction:
Improvesecurity of domain-blockchain associationVSAvoidsystem complexity
Core Design Contradiction:
ReliabilityVSDevice complexity

Solution Approach 1:

The patent introduces DNSSEC mechanisms as an intermediary trust framework between the domain name system and blockchain. The DNSSEC trust chain acts as a mediator that provides cryptographic validation (DS records, signatures) to establish reliable associations between human-readable domain names and blockchain addresses, thereby improving security while managing complexity through standardized protocols

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system performs preliminary actions by pre-establishing DNSSEC trust chains and validating domain name ownership before creating blockchain associations. The trust chain validation (including DS record verification and signature validation) is performed in advance to ensure security before the actual domain-blockchain binding is recorded on the blockchain

Inventive Principle:
Principle #10Preliminary action

2Ease of operation

If human-friendly domain names are associated with blockchain addresses, then ease of operation is improved, but the complexity of the association mechanism increases

Engineering Contradiction:
Improveuser-friendliness of blockchain interactionVSAvoidassociation mechanism complexity
Core Design Contradiction:
Ease of operationVSDevice complexity

Solution Approach 1:

The patent uses DNSSEC trust chains as an intermediary mechanism that bridges the simple user interface of domain names with the complex blockchain address system. Users interact with familiar domain names while the underlying DNSSEC validation and blockchain association mechanisms handle the complexity automatically in the background

Inventive Principle:
Principle #24Intermediary (Mediator)

Solution Approach 2:

The system creates a mapping layer that copies the simplicity of the DNS namespace onto the blockchain. Instead of requiring users to directly interact with complex blockchain addresses, the system creates domain name copies/aliases that resolve to blockchain addresses through the validated association mechanism

Inventive Principle:
Principle #26Copying

Data Source

PatentUS20250317307A1Proving top level domain name control on a blockchain
Publication Date: 2025.10.09 VERISIGN INC
  • US20250317307A1 patent drawing
  • US20250317307A1 patent drawing
  • US20250317307A1 patent drawing

AI summary

Systems, methods, and computer products for associating a top level network identifier with a blockchain address on a blockchain enable operations that may include: obtaining, from a root network segment file, an identification of a server that stores network infrastructure records associating network identifiers under the top level network identifier with network addresses and a signature on the identification of the server; obtaining, based on a first network infrastructure record, an association of the top level network identifier with the blockchain address; obtaining information sufficient to validate a trust chain, wherein the trust chain extends from a trusted authority to the association; and sending the association and the information sufficient to validate the trust chain to an executable program on the blockchain. The trust chain may be validatable by the executable program, and the association may be storable on the blockchain by the executable program.