US5958052A
Expired / Lapsed
US
⏱️ 0.0 years remaining
Method and apparatus for restricting access to private information in domain name systems by filtering information
Assignee: RPX Corp
•
Filing: 1996-07-16
•
Granted: 1999-09-28
•
Expires: 2016-07-16
Abstract
Abstract A device and method filter information to restrict access to private information of a domain in a domain name system. The device includes a filtering device. The filtering device filters information received from devices external to the domain by removing the private information before forwarding the information to devices within the domain. The private information includes IP addresses and domain names. The private information also includes any additional information appended to legitimate responses to requests from devices in the domain.
Inventors
- 👤 Steven Michael Bellovin
- 👤 William Roberts Cheswick
Bibliographic Details
Application Number
—
Jurisdiction
US
Data Source
google_patents
Last Synchronized
2026-11-04 11:30
CPC Classifications
H; H04; H04L; H04L63/00; H04L63/02; H04L61/00; H04L61/35; H04L61/45; H04L61/4505; H04L61/4511; H04L9/00; H04L9/40; Y; Y10; Y10S; Y10S707/00; Y10S707/99931; Y10S707/99939
Claims Analysis
Total Claims: 36
Claim 1
Independent Claim
155 words
A subsystem in a domain name system that filters information and restricts access to private information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the subsystem comprising: a switching device that receives a first communication from a first device of the first domain being directed to a device of the second domain, the communication including a first request for private information of the first domain, the switching device redirecting the first request to a second device in the fist domain; and a filtering device that receives a second communication from the second domain destined to the first domain, wherein the filtering device generates filtered information by removing be private information of the fist domain from message data contained in the second communication and forwards the filtered information to one of the plurality of devices of the first domain.
Claim 2
Dependent Claim
155 words
A subsystem in a domain name system that filters information and restricts access to private information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the subsystem comprising: a switching device that receives a first communication from a first device of the first domain being directed to a device of the second domain, the communication including a first request for private information of the first domain, the switching device redirecting the first request to a second device in the fist domain; and a filtering device that receives a second communication from the second domain destined to the first domain, wherein the filtering device generates filtered information by removing be private information of the fist domain from message data contained in the second communication and forwards the filtered information to one of the plurality of devices of the first domain.
Claim 3
Dependent Claim
32 words
The subsystem of claim 1, wherein the private information of the first domain includes at least one of a domain lame and an IP address of a device of the first domain.
Claim 4
Dependent Claim
78 words
The subsystem of claim 1, wherein the second communication is sent by a device of the second domain in response to a query request by the one of the devices of the domain, the second communication including additional information not requested by the one of the devices of the first domain, the filtering device removing the private information of the At domain from the additional information not requested by the one of the devices of the first domain.
Claim 5
Dependent Claim
24 words
The subsystem of claim 1, wherein the filtering device generates filtered information by modifying the second communication based on a local security administrative policy.
Claim 6
Dependent Claim
55 words
The subsystem of claim 4, wherein the local security administrative policy is to at least one of replace a pointer to a device of the second domain in the second communication with a pointer to a device in the fit domain and modify a mail exchange record received from the device of the second domain.
Claim 7
Dependent Claim
38 words
The subsystem of claim 1, wherein the first communication includes a second request for information that is not private information of the first domain, the switching device forwarding the second request to the device of the second domain.
Claim 8
Dependent Claim
17 words
The subsystem of claim 1, wherein the second device is a name server of the first domain.
Claim 9
Dependent Claim
28 words
The subsystem of claim 1, wherein the plurality of devices of the first domain is modified to direct all communications with the first domain to the switching device.
Claim 10
Dependent Claim
40 words
The subsystem of claim 1, wherein the second device is one of a name server and a resolver and requests for private information from devices in the first domain other than the second device are directed to the first device.
Claim 11
Dependent Claim
18 words
The subsystem of claim 1, wherein the switching device is part of a firewall of the first domain.
Claim 12
Independent Claim
145 words
A method of operation of a subsystem in a domain name system for filtering and restricting access to private; information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the method comprising: receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain; redirecting the first request to a second device of the first domain; receiving a second communication from the second domain destined to the first domain; generating filtered information by removing private information of the first domain from message data contained in the second communication; and forwarding the filtered information to one of the plurality of devices of the fist domain.
Claim 13
Independent Claim
145 words
A method of operation of a subsystem in a domain name system for filtering and restricting access to private; information of a first domain, the first domain being coupled to a second domain and the first and second domains each comprising a plurality of devices, the method comprising: receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain; redirecting the first request to a second device of the first domain; receiving a second communication from the second domain destined to the first domain; generating filtered information by removing private information of the first domain from message data contained in the second communication; and forwarding the filtered information to one of the plurality of devices of the fist domain.
Claim 14
Dependent Claim
32 words
The method of claim 11, wherein the private information of the first domain includes at least one of a domain name and an IP address of a device of the at domain.
Claim 15
Dependent Claim
82 words
The method of claim 11, wherein the second communication is sent by a device of the second domain in response to a query request by the one of the devices of the first domain, the second communication including additional information not requested by the one of the devices of the first domain, the generating filtered information step comprising; removing the private information of the first domain from the additional information not requested by the one of the devices of the first domain.
Claim 16
Dependent Claim
18 words
The method of claim 11, further comprising: modifying the second communication based on a local security administrative policy.
Claim 17
Dependent Claim
52 words
The method of claim 14, wherein the local security administrative policy is to at least one of replace a pointer to a device of the second domain in the second communication with a pointer to a device in the first domain and modify a mail exchange record received from the second domain.
Claim 18
Dependent Claim
37 words
The method of claim 11, further comprising: forwarding a second request of the first communication from the first device, to the device of the second domain the second request requesting information not private to the first domain.
Claim 19
Dependent Claim
17 words
The method of claim 11, wherein the second device is a name server of the first domain.
Claim 20
Independent Claim
139 words
An apparatus for use in a domain name system, comprising: a switching device that receives a first communication from a first device of a first domain, the first communication including a first request for private information of the first domain, said first communication being directed to a second domain, the first and second domains each comprising a plurality of devices, the switching device redirecting, the first request for the private information front a first device of the second domain to a second device in the first domain; a filtering device that receives a second from the second domain destined to the first domain, wherein the filtering device generates filtered information a by removing private information of the first domain from message second communication and forwards the filtered information to one of the plurality of devices of the first domain.
Claim 21
Independent Claim
139 words
An apparatus for use in a domain name system, comprising: a switching device that receives a first communication from a first device of a first domain, the first communication including a first request for private information of the first domain, said first communication being directed to a second domain, the first and second domains each comprising a plurality of devices, the switching device redirecting, the first request for the private information front a first device of the second domain to a second device in the first domain; a filtering device that receives a second from the second domain destined to the first domain, wherein the filtering device generates filtered information a by removing private information of the first domain from message second communication and forwards the filtered information to one of the plurality of devices of the first domain.
Claim 22
Dependent Claim
32 words
The apparatus of claim 18, wherein the private information of the first domain includes at least one of a domain name and an IP address of a device of the first domain.
Claim 23
Dependent Claim
79 words
The apparatus of claim 18, wherein the second communication is sent by a device of the second domain in response to a query request by the one of the devices of the first domain, the second communication including additional information not requested by the one of the devices of the first domain, the filtering device removing the private information of the first domain from the additional information not requested by the one of the devices of the first domain.
Claim 24
Dependent Claim
24 words
The apparatus of claim 18, wherein the filtering device generates filtered information by modifying the second communication based on a local security administrative policy.
Claim 25
Dependent Claim
52 words
The apparatus of claim 21, wherein the local security administrative policy is to at least one of replace a pointer to a device of the second domain in the second communication with a pointer to a device in the first domain, and modify a mail exchange record received from the second domain.
Claim 26
Dependent Claim
38 words
The apparatus of claim 18, wherein the first communication includes a second request for information that is not private information of he first domain, the switching device forwarding the second request to the device of the second domain.
Claim 27
Dependent Claim
17 words
The apparatus of claim 18, wherein the second device is a name server of the first domain.
Claim 28
Dependent Claim
18 words
The apparatus of claim 18, wherein he switching device is part of a firewall of the first domain.
Claim 29
Independent Claim
160 words
A method of operation of an apparatus in a domain name system for filtering and restricting access to private information of a first domain the first domain being coupled to a second domain and the first and second domain comprising a plurality of devices, the method comprising: receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain, and redirecting the first request for the private information of the first domain to a second device of the first domain; receiving a second communication from a device of the second domain destined to one of the devices of the first domain; generating filtered information by removing private information of the first domain from message data contained in the second communication; and forwarding the filtered information to the one of the devices of the first domain.
Claim 30
Independent Claim
160 words
A method of operation of an apparatus in a domain name system for filtering and restricting access to private information of a first domain the first domain being coupled to a second domain and the first and second domain comprising a plurality of devices, the method comprising: receiving a first communication from a first device of the first domain that is directed to a device of the second domain, the first communication including a first request for the private information of the first domain, and redirecting the first request for the private information of the first domain to a second device of the first domain; receiving a second communication from a device of the second domain destined to one of the devices of the first domain; generating filtered information by removing private information of the first domain from message data contained in the second communication; and forwarding the filtered information to the one of the devices of the first domain.
Claim 31
Dependent Claim
32 words
The method of claim 22, wherein the private information of the first domain includes at least one of a domain name and an IP address of a device of the first domain.
Claim 32
Dependent Claim
82 words
The method of claim 26, wherein the second communication is sent by the dice of the second domain in response to a query request by the one of the devices of the first domain, the second communication including additional information not requested by the one of the devices of the first domain, the generating filtered information step comprising: removing the private information of the first domain from the additional information not requested by the one of the device of the first domain.
Claim 33
Dependent Claim
18 words
The method of claim 26, further comprising: modifying the second communication based on a local security administrative policy.
Claim 34
Dependent Claim
52 words
The method of claim 29, wherein the local security administrative policy is to at least one of replace a pointer to a device of the second domain in the second communication with a pointer to a device in the first domain and modify a mail exchange record received from the second domain.
Claim 35
Dependent Claim
33 words
The method of claim 26, further comprising: forwarding a second request of the first communication to the device of the second domain, the second request requesting information not private to the first domain.
Claim 36
Dependent Claim
17 words
The method of claim 26, wherein the second device is a name server of the first domain.
References Cited (Backward Citations)
US5204961A
Cited
US5519858A
Cited
US5586260A
Cited
US5606668A
Cited
US5416842A
Cited
US5623601A
Cited
US5550984A
Cited
US5655077A
Cited
US5614927A
Cited
US5548649A
Cited
US5802320A
Cited
US5664185A
Cited
US5805820A
Cited
USPTO Annuity & Maintenance Windows
| Annuity Stage | Window Opens | Payment Deadline | Surcharge Period Until | Estimated Fee | Status |
|---|---|---|---|---|---|
| 3.5 Years (Year 4) | 2002-09-27 | 2003-03-29 | 2003-09-28 | $2000.00 | Window Closed / Lapsed |
| 7.5 Years (Year 8) | 2006-09-27 | 2007-03-29 | 2007-09-28 | $3760.00 | Window Closed / Lapsed |
| 11.5 Years (Year 12) | 2010-09-27 | 2011-03-29 | 2011-09-28 | $7700.00 | Window Closed / Lapsed |