Afilias Limited

Howard Eland

James M Galvin

Cedarampattu Mohan

Jimmy Lam

Joseph Nicholas Abley

Hui Zhou

Michael Runcieman

Cederampattu Mohan

System and method for determining traceability of network request traffic over a communications network for reducing strain in traffic processing resources, which includes: provisioning a direct interconnect on the communications network between the server and a predefined source, the direct interconnect providing a private service interface, a defined pairings data of the predefined source with the direct interconnect stored in a storage as a network traffic almanac; provisioning a public service interface on the communications network; receiving a request traffic having an address of the predefined source via the public service interface; consulting the defined paring data with the address to determine if the request traffic matches the predefined source; and de-prioritizing processing of the request traffic based on the request traffic being received on the public service interface rather than the direct interconnect, by dynamically applying a prioritize criterion to the second request traffic before generating a response traffic.

Determining traceability of network traffic over a communications network

A method for synchronizing management of a plurality of domain names in a Domain Name System (DNS). The method comprises the following steps: receiving a request from a domain name registrant for an action as an operation on an object unique to a domain name of the DNS, the domain name having synchronized objects with another domain name being stored as a domain name bundle including the domain name in a domain name database; changing the object in the domain name database according to the action; identifying the another domain name in the domain name bundle; requesting a change to a corresponding object to the object for the another domain name with the action in order to propagate the operation performed on the object to the corresponding object, the corresponding object being unique to the another domain name; and forwarding a reported result of the action to the domain name registrant, the object and the corresponding object representing the synchronized objects by having the same parameter value, an owner to all domain names in the domain name bundle being the domain name registrant.

Domain name registration and management

Methods for transitioning an existing TLD from an existing registry operator to a new TLD of a new registry operator, the new TLD subsequently accessible over a communications network, the existing TLD having a non-operational zone or an operational zone. The method includes: collecting existing registry data for the existing TLD from a plurality of registrars associated with one or more domain names of the existing TLD, such that each of the plurality of registrars provides a respective portion of the existing registry data; aggregating the respective portions of the existing registry data to generate new registry data for the new TLD; generating new zone data for the new TLD; publishing in a first mode the new zone data to nodes of a DNS (Domain Name System), the first mode disabling write functionality of the new zone data while facilitating querying of the new zone data; and publishing in a second mode the new zone data to the nodes of the DNS, the second mode facilitating the write functionality of the new zone data, including the querying and updating of the new zone data, the new zone data of the second mode considered as an operational zone; wherein the new zone data and the new registry data in the first mode as well as in the second mode are accessible by the plurality of registrars over the communications network.

Safemode management of domain transitioning

A system for concurrently facilitating publishing a current version of a plurality of Domain Name System (DNS) records for a domain name and storing a next version of the plurality of DNS records for the domain name, the system comprising a record selection module for obtaining selected data of registry data associated with the domain name stored in a registry database; a DNS Security (DNSSEC) signing system having at least one signing module for digitally signing the selected data of the registry data; a distribution system for coordinating concurrent generation of the current version and the next version; and the distribution system and signing system cooperating to, in part, generate the current version according to a first set of generation instructions and transmit the current version to one or more authoritative servers of the DNS in a first transmission path that bypasses storing the current version in the registry database.

System and method for generating concurrently live and test versions of DNS data

A system for concurrently publishing a current version of a plurality of Domain Name System (DNS) records for a zone of domain name and for storing a next version of the plurality of DNS records for the zone, the system comprising: a record selection module for obtaining registry data associated with the domain name stored in a registry database; a DNS Security (DNSSEC) signing system having a first High Security Module (HSM) of a first vendor for facilitating digital signing of the registry data to generate a first signed DNS record using a first signing key (SK) and a second HSM of a second vendor for facilitating digital signing of the registry data to generate a second signed DNS record using a second signing key SK, the SKdifferent from the SK; and a distribution system for coordinating concurrent generation and transmission of the current version and the next version; the distribution system and signing system cooperating to: generate the concurrent version using SKto include the first signed DNS record according to a first set of generation instructions and transmit in a first transmission path that bypasses storing of the current version in the registry database; and while the current version is operational in the DNS, generate the next version using SKto include the second signed DNS record according to a second set of generation instructions and transmit to a publication storage for at least one of testing or validation by a processing facility in a second transmission path that bypasses storing of the next version in the registry database.

System and method for generating current live and test versions of DNS data for HSM changes

A system for publishing a plurality of Domain Name System (DNS) records for a domain name, the system comprising: a record selection module for obtaining selected data of registry data associated with the domain name in a registry database; a DNS Security (DNSSEC) signing system having at least one signing module for digitally signing the selected data of the registry data, the digitally signing using one or more signing keys (SK) to generate a signed DNS record, the one or more signing keys associated with the registry data of the domain name; a distribution system for coordinating the publishing of a set of DNS records in the DNS by facilitating transmitting of the set of DNS records to one or more authoritative servers of the DNS in a transmission path that bypasses storing of the signed DNS record in the registry database, the set of DNS records generated based on a signing identifier on how to generate the set of DNS records by either: a) sending the selected data to the DNSSEC signing system for subsequent direct inclusion as the signed DNS record in the set of DNS records by the DNSSEC signing system using a set of generation instructions; or b) including the selected data as an unsigned DNS record in the set of DNS records by the distribution system using the set of generation instructions, wherein the transmission path also bypasses the at least one signing module of the DNSSEC signing system.

System and method for publishing DNS records of a domain including either signed or unsigned records

A method for concurrently publishing a current version of a plurality of Domain Name System (DNS) records for zone of a domain name and for storing a next version of the plurality of DNS records for the zone, the method comprising the steps of: obtaining selected data of registry data associated with the domain name stored in a registry database; digitally signing the registry data to generate a first signed DNS record and digitally signing the registry data to generate a second signed DNS record; and a distribution system for coordinating concurrent generation and transmission of the current version and the next version; the distribution system and signing system cooperating to: a) generate the current version to include the first signed DNS record; and b) while the current version is operational in the DNS, generate the next version the second signed DNS record.

System and method for generating current live and test versions of DNS data for rollover

A system and method for determining the traceability of network request traffic over a communications network for reducing strain in traffic processing resources, which includes: provisioning a direct interconnect on the communications network between the server and a predefined source, the direct interconnect providing a private service interface, a defined pairings data of the predefined source with the direct interconnect stored as a network traffic almanac; provisioning a public service interface on the communications network; receiving a request traffic having an address of the predefined source via the public service interface; consulting the defined pairing data with the address to determine the request traffic matches the predefined source; and de-prioritizing the processing of the request traffic based on the request traffic being received on the public service interface rather than on the direct interconnect by dynamically applying a prioritize criterion to the second request traffic before generating a response traffic.

Growing community of inventors

Horsham, PA, United States of America

Howard Eland