Secure domain name system to support a private communication service

Patent metadata

Field	Value
Publication number	US-2019190894-A1
Application number	US-201715848983-A
Country	US
Kind code	A1
Filing date	Dec 20, 2017
Priority date	Dec 20, 2017
Publication date	Jun 20, 2019
Grant date	—

Abstract

Described herein are systems, methods, and software to enhance secure communications between computing systems. In one implementation, a private domain name system (DNS) receives a DNS lookup request from a computing system of a plurality of computing systems associated with a private communication group, and forwards the DNS lookup request to a public DNS. The private DNS further receives a public address associated with the DNS lookup request from the public DNS, translates the public address to a private address, and transfers the private address to the requesting computing system.

First claim

What is claimed is:

1 . A computing apparatus comprising:
one or more computer readable storage media; a processing system communicatively coupled to the one or more computer readable storage media; and program instructions stored on the one or more computer readable storage media to provide a private domain name system (DNS) for a plurality of computing systems that, when read and executed by the processing system, direct the processing system to at least:
receive a DNS lookup request from a computing system of the plurality of computing systems;
forward the DNS lookup request to a public DNS;
receive a public address associated with the DNS lookup request from the public DNS;
translate the public address to a private address; and
transfer the private address to the computing system.

2 . The computing apparatus of claim 1 , wherein the DNS lookup request comprises a Uniform Resource Locator (URL) or a Uniform Resource Indicator (URI).

3 . The computing apparatus of claim 2 , wherein the public address comprises a first internet protocol (IP) address and the private address comprises a second IP address.

4 . The computing apparatus of claim 1 , wherein receiving the DNS lookup request from a computing system of the plurality of computing systems comprises receiving a packet from a communication service on the computing system, wherein the packet comprises an encrypted portion and a non-encrypted portion, wherein the encrypted portion comprises the DNS lookup request, wherein the non-encrypted portion comprises public addressing information to address the private DNS and group identifier information, and wherein the group identifier information indicates at least an identifier for a communication group for the plurality of computing systems to decrypt the encrypted portion at the private DNS.

5 . The computing apparatus of claim 4 , wherein the encrypted portion further includes private addressing information.

6 . The computing apparatus of claim 5 , wherein the public addressing information comprises a first destination internet protocol (IP) address associated with the private DNS and wherein the private addressing information comprises a second destination IP address associated with the private DNS.

7 . The computing apparatus of claim 4 , wherein transferring the private address to the computing system comprises:
generating a second packet, wherein the second packet comprises a second encrypted portion and a second non-encrypted portion, wherein the second encrypted portion comprises the private address, wherein the second non-encrypted portion comprises second public addressing information to address the computing system, and wherein the second group identifier information indicates at least an identifier for the communication group to decrypt the encrypted portion at the private DNS; and transferring the second packet to the computing system.

8 . A method of providing a private domain name system (DNS) for a plurality of computing systems, the method comprising:
receiving a DNS lookup request from a computing system of the plurality of computing systems; forwarding the DNS lookup request to a public DNS; receiving a public address associated with the DNS lookup request from the public DNS; translating the public address to a private address; and transferring the private address to the computing system.

9 . The method of claim 8 , wherein the DNS lookup request comprises a Uniform Resource Locator (URL) or a Uniform Resource Indicator (URI).

10 . The method of claim 8 , wherein the public address comprises a first internet protocol (IP) address and the private address comprises a second IP address.

11 . The method of claim 8 , wherein receiving the DNS lookup request from a computing system of the plurality of computing systems comprises receiving a packet from a communication service on the computing system, wherein the packet comprises an encrypted portion and a non-encrypted portion, wherein the encrypted portion comprises the DNS lookup request, wherein the non-encrypted portion comprises public addressing information to address the private DNS and group identifier information, and wherein the group identifier information indicates at least an identifier for a communication group for the plurality of computing systems to decrypt the encrypted portion at the private DNS.

12 . The method of claim 11 , wherein the encrypted portion further includes private addressing information.

13 . The method of claim 12 , wherein the public addressing information comprises a first destination internet protocol (IP) address associated with the private DNS and wherein the private addressing information comprises a second destination IP address associated with the private DNS.

14 . The method of claim 11 , wherein transferring the private address to the computing system comprises:
generating a second packet, wherein the second packet comprises a second encrypted portion and a second non-encrypted portion, wherein the second encrypted portion comprises the private address, wherein the second non-encrypted portion comprises second public addressing information to address the computing system, and wherein the second group identifier information indicates at least an identifier for a communication group of the plurality of computing systems to decrypt the encrypted portion; and transferring the second packet to the computing system.

15 . The method of claim 8 , wherein the private DNS services DNS lookup requests from the plurality of computing systems, and wherein the public DNS services DNS lookup requests for the plurality of computing systems and a second plurality of computing systems.

16 . A communication network comprising:
a plurality of computing systems; a private domain name system; a first computing system of the plurality of computing systems configured to:
transfer a DNS lookup request to the private domain name system;
the private domain name system configured to:
receive the DNS lookup request from the first computing system;
forward the DNS lookup request to a public DNS;
receive a public address associated with the DNS lookup request from the public DNS;
translate the public address to a private address; and
transfer the private address to the first computing system.

17 . The computing network of claim 16 , wherein the DNS lookup request comprises a Uniform Resource Locator (URL) or a Uniform Resource Indicator (URI).

18 . The computing network of claim 16 , wherein the public address comprises a first internet protocol (IP) address and the private address comprises a second IP address.

19 . The computing network of claim 18 , wherein the second IP address comprises an IP address associated with an overlay network for the plurality of computing systems.

20 . The computing network of claim 16 , wherein the private DNS services DNS lookup requests from the plurality of computing systems, and wherein the public DNS services DNS lookup requests for the plurality of computing systems and a second plurality of computing systems.

Assignees

• Colortokens Inc

Inventors

• Kapoor Anoop
• Farjadi Ryan
• Parekh Pankaj
• Trivedi Ashish
• Tyagi Satyam
• Magganmane Harish
• Mohanty Deepak
• Voleti Ravi

Classifications

• H04L67/02

  based on web technology, e.g. hypertext transfer protocol [HTTP] · CPC title

• H04L61/2007

  Electricity · mapped topic

• H04L61/1511

  Electricity · mapped topic

• H04L63/0428 Primary

  wherein the data content is protected, e.g. by encrypting or encapsulating the payload · CPC title

• H04L2101/38

  Telephone uniform resource identifier [URI] · CPC title