Cloudflare, Inc.

Marwan Fayed

Sami Matias Kerola

Pavel Odintsov

Nicholas Thomas Sullivan

Watson Bernard Ladd

Sai Krishna Deepak Maram

Armando Faz Hernández

Alexander Andrew Davidson

An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

Decoupling of IP address bindings and use in a distributed cloud computing network

A client device receives a challenge request from a server to prove that internet traffic was initiated by a human user through verifying a physical interaction between a human user and a hardware component. The client device causes a prompt to be displayed to perform the physical interaction with the hardware component. A cryptographic attestation is received that includes an attestation signature that is generated after confirmation that the physical interaction was performed with the hardware component. A zero-knowledge proof of the attestation signature is generated and transmitted to the server for verification. The client device receives the requested content responsive to the server verifying the validity of the zero-knowledge proof.

Using a zero-knowledge proof to prove knowledge that a website visitor is a legitimate human user

Growing community of inventors

St. Andrews, United Kingdom

Marwan Fayed