Verisign, Inc.

Swapneel Sheth

Andrew Fregly

Andrew Kaizer

Burton S Kaliski, Jr

Najmehalsadat Miramirkhani

Scott Hollenbeck

Patrick Kane

James Gould

Joseph M Waldron

Marc Anderson

Senthilkumar Kunjithapatham-Saravanan

Karthik Shyamsunder

Andrew West

Paul Tidwell

Burton S Kaliski

Hari Sola

Pedro Vasquez

Zhao Zhao

Matthew Ward

Techniques for associating verifiable credentials with a decentralized identifier are described herein. A computing device can determine a link between a decentralized identifier (DID) and a domain name, and assign a verifiable credential to the DID to invoke an action associated with the domain name. For example, the verifiable credential can be used to control an identifier on a platform different than the domain name. In some examples, a registrar can validate an identity of the registrant based on the decentralized identifier. The computing device can use the verifiable credential identified in the decentralized identifier to provide secure verifications of an identity.

Verifier credential determination by a registrant

Systems, methods, and computer products for providing fractional control of a domain name by a plurality of entities enable operations that may include: providing an executable program for storage on a blockchain, the executable program configured to store a representation of the domain name in association with a plurality of identifications that each correspond to an entity that has a fractional control of the domain name; indicating, to the program, that the domain name is available for fractional control; receiving a message that includes the representation of the domain name and indications of a plurality of blockchain addresses, which are stored by the program as the plurality of identifications; and storing, in a domain name registration database, a representation of a fractional control status of the domain name. Each fractional control of the domain name may enable an authorization or a refusal of a modification related to the domain name.

Authorization and refusal of modification, and partial modification ability, of a network identifier

A digital object architecture infrastructure includes a handle system that stores handle data and a proxy server that caches handle data for rapid access. A client connects to the proxy server to request access to the handle data. When the handle data does not have access restrictions and is currently cached, the proxy server returns the handle data to the client without accessing the handle system. When the handle data does not have access restrictions and is not cached, the proxy server obtains the handle data from the handle system, caches a copy of the handle data for future access, and provides the handle data to the client. The proxy server may cache encrypted handle data that is subject to access restrictions, cannot be decrypted by proxy server, and can be provided to a client determined to be allowed access. The client can then decrypt the encrypted handle data.

Caching proxy for a digital object architecture

A computer-implemented method includes: receiving a first request from a registrant to associate a domain name with a blockchain address; transmitting the first request to a registry, wherein the registry is configured to digitally sign the first request; submitting the digitally signed data from the first request or transformation of the data from first request to a first blockchain contract, wherein the first blockchain contract is configured to store the associated domain name as a first blockchain identifier; determining a deployment of a second blockchain contract by the registrant; transmitting a second request to the registrant to associate a subdomain of the associated domain name as a second blockchain identifier for the second blockchain contract; receiving, from the registrant, an indication to use the subdomain as the second blockchain identifier for the second blockchain contract; transmitting the second request to a registry, wherein the registry is configured to digitally sign the second request; submitting the digitally signed data from the second request or transformation of the data from second request to a second blockchain contract, wherein the second blockchain contract is configured to store the associated domain name as a second blockchain identifier.

Methods and systems for blockchain name identifiers

Provided is a method for providing Registration Data Access Protocol ('RDAP') responses. The method includes obtaining, at a RDAP client over a network, a RDAP query for RDAP data from a user; providing, by the RDAP client, the RDAP query and a cryptographic credential to a RDAP server, wherein the RDAP server communicates with one or more thick RDAP servers to provide respective thick RDAP answers to the RDAP query, wherein at least one the respective thick RDAP answers are encrypted using a symmetric or asymmetric cryptographic key associated with the cryptographic credential of the RDAP client; obtaining a consolidated thick RDAP answer to the RDAP query from the RDAP server; decrypting the consolidated thick RDAP answer using a symmetric or asymmetric cryptographic key associated with the cryptographic credential; and providing the thick RDAP answer that is decrypted to the user.

GTLD domain name registries RDAP architecture

Systems, methods, and computer products for associating a top level network identifier with a blockchain address on a blockchain enable operations that may include: obtaining, from a root network segment file, an identification of a server that stores network infrastructure records associating network identifiers under the top level network identifier with network addresses and a signature on the identification of the server; obtaining, based on a first network infrastructure record, an association of the top level network identifier with the blockchain address; obtaining information sufficient to validate a trust chain, wherein the trust chain extends from a trusted authority to the association; and sending the association and the information sufficient to validate the trust chain to an executable program on the blockchain. The trust chain may be validatable by the executable program, and the association may be storable on the blockchain by the executable program.

Proving top level domain name control on a blockchain

For digital objects registered via the DOA infrastructure, attribute inheritance is enabled between related objects using naming conventions for the handle IDs or data models for handle data. Each child object of a parent object may automatically inherit at least one predetermined attribute of the parent object. When a retriever machine (local handle registry or client machine) obtains a handle ID for a digital object, the retriever machine may determine that the digital object is a child object of a parent object, determine a handle ID for the parent object, obtain the author attribute from the handle data of the parent object, and associate the author attribute of the parent object with the child object. The retriever machine may determine that the digital object is a child object of the parent object via naming conventions for handle IDs or via data models for the handle data.

Attribute inheritance of related objects for a digital object architecture

Techniques for allowing third-party DNS service providers to programmatically initiate changes to DNS resource records using an interface provided by a registrar or registry are disclosed. Further, techniques for validating change requests received at such an interface are disclosed. The disclosed techniques reduce errors and increase convenience.

Integrated DNS service provider services using certificate-based authentication

Techniques for transferring registration of a domain name from a first registrant to a second registrant for cryptocurrency in a blockchain network and in the Domain Name System (DNS) are disclosed. The techniques can include receiving a purchase request message comprising the domain name, at least one purchase parameter, and a second registrant network identifier, and sending a purchase instruction message to an executable program on a blockchain for the blockchain network, the purchase instruction message including the domain name and the second registrant network identifier, such that the executable program writes at least the domain name, the second registrant network identifier, and an identifier of a gaining registrar to a deed contract for the domain name and emits an event representing a request to transfer registration of the domain name.

Transferring a domain name on a secondary blockchain market and in the DNS

Systems, methods, computer products for associating a blockchain address with a network identifier enable operations that may include: receiving, over a computer network and by a network identifier infrastructure operator, a request for a registration status of the network identifier; retrieving, by the network identifier infrastructure operator, an association of the network identifier with the blockchain address; signing, by a private key of a key pair of the network identifier infrastructure operator, the association of the network identifier with the blockchain address, which produces a signed association of the network identifier with the blockchain address; and providing, over the computer network and by the network identifier infrastructure operator, the signed association of the network identifier with the blockchain address.

Blockchain network identifier claiming using registration status requests

Methods, systems, and computer program products are provided for optimizing searches of records including text elements. The methods, systems, and computer program perform operations including receiving a regular expression search query from a client. The operations also include parsing elements of the regular expression search query. The operations further include identifying search mechanisms based on the elements parsed from the search query. In addition, the operations include searching a data set identified by the regular expression search query using the search mechanisms. Further, the operations include returning a search result from the data set to the client based on a result of the searching.

Regular expression searching

Systems, methods, and computer products for associating a network identifier with a network address enable operations that may include: receiving a network identifier associated with a first network; obtaining an identification of a proof provider; sending, to the proof provider, a network address associated with a second network, wherein the proof provider is configured to generate a signed association of the network identifier with the network address using a private key of the proof provider; obtaining the signed association; and providing, to the second network, at least the signed association. The second network may be configured to validate the signed association and store the signed association.

Delegated agent proof of network identifier control

Systems, methods, and computer products for administering the association of a network identifier with a blockchain address for a blockchain enable operations that may include obtaining, by an authoritative record entity, an initiation of an administrative action regarding an association of the network identifier with the blockchain address, wherein the administrative action comprises at least one of deleting the association, updating the association, modifying the association, or renewing the association; and providing, in response to the obtaining, a registration entity proof message, wherein the registration entity proof message comprises a signature by a private key of the authoritative record entity, wherein the registration entity proof message specifies a registration entity of record for the network identifier. An executable program stored on the blockchain may be configured to obtain the signature, verify the signature, and implement the administrative action regarding the association of the network identifier with the blockchain address.

Lifecycle administration of domain name blockchain addresses

In one embodiment, a domain-name based framework implemented in a digital assistant ecosystem uses domain names as unique identifiers for request types, requesting entities, responders, and target entities embedded in a natural language request. Further, the framework enables interpreting natural language requests according to domain ontologies associated with different responders. A domain ontology operates as a keyword dictionary for a given responder and defines the keywords and corresponding allowable values to be used for request types and request parameters. The domain-name based framework thus enables the digital assistant to interact with any responder that supports a domain ontology to generate precise and complete responses to natural language based requests.

Growing community of inventors

Fairfax Station, VA, United States of America

Swapneel Sheth