Networks Associates Technology, Inc.

Jeffrey Cook

Handong Wu

Michael D Heyman

Peter T Dinsmore

Lindy Foster

A method for controlling access to information from a DNS server having an access control list specifying clients approved to receive an IP address corresponding to a domain name of a target host is disclosed. The method includes receiving a request from a client for an IP address of a domain name at the DNS server and looking up the domain name in an access control list. The client is sent a reply containing the IP address of the domain name if the client is authorized in the access control list to receive the IP address. If the client is not authorized to receive the IP address, the request is denied.

DNS server access control system and method

A scalable system for notification of a change in condition of an electronic certificate is provided. The system includes a network of servers capable of providing notification of changes in conditions of electronic certificate to an unlimited number of users. The system includes a first server comprising a detection module and a notification module. The system having at least one server capable of actively monitoring and detecting changes in conditions of a certificate. Other CAP servers in the system may and/or may not actively monitor electronic certificates at the same time. That is, these CAP servers may actively monitor conditions of electronic certificates at the same time they play passive roles (e.g., not monitoring the electronic certificates for which they will be notified of changes from another CAP server). The change in condition that will trigger the notification action of the present invention includes changes to the content of the electronic certificate and/or changes of the status of the electronic certificates including, but not limited to, the revocation of, roll-over of, disablement of, expiration of the electronic certificate. An example of the type of information that the present invention may provide to users includes, but are not limited to, notice that a certificate has expired and an updated electronic certificate. Because the present invention is scalable, an unlimited number of users may be serviced. Further, the various CAP Servers may be configured to monitor specific certificates or types of changes to the certificates, while depending on another CAP Server for monitoring other certificates so as to be more efficient. In fact, one CAP Server may be configured to support notification to a number of users of one company and depend upon other servers to monitor for changes to the conditions of various electronic certificates. The present invention provides many variations in configurations of CAP server-user networks that provides notification services to an unlimited number of users

Growing community of inventors

Santa Monica, CA, United States of America

Jeffrey Cook