Authenticated name resolution

1. A method for authenticating a DNS request, comprising:

receiving at an authenticating server comprising an electronic processor a DNS resolution request including a domain name and authentication information, wherein the information is not in the domain name, and wherein the authentication information comprises at least one of a username/password combination, or a security certificate;

validating, on the authenticating server comprising an electronic processor, the authentication information;

determining, by the authenticating server comprising an electronic processor, a DNS action based on the validation of the authentication information, wherein the DNS action comprises at least one of: sending a response message with an IP address, network layer identifier, or service location identifier; delaying sending a response message; sending a response message with an IP address corresponding to a website address containing authentication instructions; or responding with an alternative IP address corresponding to a special version of a resource configured to look just like the resource; and

executing, on the authenticating server comprising an electronic processor, the DNS action.

2. The method of claim 1 , wherein authentication information is added to the DNS resolution request by a device other than a device that originates the DNS resolution request.

3. The method of claim 1 , wherein the DNS resolution request further includes one or more of: a source network layer address, an encrypted data package, or hardware identification information.

4. The method of claim 1 , comprising:

receiving, at the authenticating server, authentication information from a resource server for a particular user; and

updating the authenticating server to store the authentication information.

5. The method of claim 1 , wherein the IP address, network layer identifier, or service location identifier corresponds to a one-time-use address.

6. The method of claim 1 , wherein the IP address, network layer identifier, or service location identifier corresponds to an address assigned to a particular user.

7. The method of claim 1 , wherein delaying sending a message comprises:

determining that a DNS request was received from a particular user previously;

determining that a DNS response was delayed for a first time period; and

delaying sending a message by a second time period, wherein the second time period is greater than the first time period.

8. The method of claim 1 , comprising:

determining a prioritized list of classes of users, wherein higher priority classes receive access to services first or a higher quality of services; and

classifying a user based on the authentication information into a class in the prioritized list of classes,

wherein the DNS action comprises: sending a response message with an IP address corresponding to a server delivering a particular class.

9. The method of claim 1 , comprising:

determining a billing event based on the validation of the authentication information, and

billing a client based on the billing event.

10. A system for authenticating a DNS request, comprising:

an authenticating server comprising:

a processor; and

memory, wherein the memory contains instructions, which, when executed by the processor, perform a method comprising:

receiving at an authenticating server a DNS resolution request including a domain name and authentication information, wherein the information is not in the domain name, and wherein the authentication information comprises at least one of a username/password combination, or a security certificate;

validating, on the authenticating server, the authentication information;

determining, by the authenticating server, a DNS action based on the validation of the authentication information, wherein the DNS action comprises at least one of: sending a response message with an IP address, a network layer address or service location address, delaying sending a response message, sending a response message with an IP address corresponding to a website address containing authentication instructions, or responding with an alternative IP address corresponding to a special version of a resource configured to look just like the resource; and

executing, on the authenticating server, the DNS action.

11. The system of claim 10 , wherein authentication information is added to the DNS resolution request by a device other than a device that originates the DNS resolution request.

12. The system of claim 10 , wherein the DNS resolution request further includes one or more of: a source network layer address, an encrypted data package, or hardware identification information.

13. The system of claim 10 , wherein the method comprises:

receiving, at the authenticating server, authentication information from a resource server for a particular user; and

updating the authenticating server to store the authentication information.

14. The system of claim 10 , wherein the IP address, the network layer address or service location address corresponds to a one-time-use address.

15. The system of claim 10 , wherein the IP address, the network layer address or service location address corresponds to an individualized address assigned to a particular user.

16. The system of claim 10 , wherein delaying sending a message comprises:

determining that a DNS request was received from a particular user previously;

determining that a DNS response was delayed for a first time period; and

delaying sending a message by a second time period, wherein the second time period is greater than the first time period.

17. The system of claim 10 , wherein the method comprises:

determining a prioritized list of classes of users, wherein higher priority classes receive access to services first or a higher quality of services; and

classifying a user based on the authentication information into a class in the prioritized list of classes,

wherein the DNS action comprises: sending a response message with an IP address corresponding to a server delivering a particular class.

18. The system of claim 10 , wherein the method comprises:

determining a billing event based on the validation of the authentication information, and

billing a client based on the billing event.

19. Non-transitory computer-readable media containing instructions, which, when executed by a processor, perform a method comprising:

determining a prioritized list of classes of users, wherein higher priority classes receive access to services first or a higher quality of services;

classifying a user based on the authentication information into a class in the prioritized list of classes;

receiving at an authenticating server a DNS resolution request including authentication information, wherein the authentication information comprises at least one of a username/password combination, or a security certificate;

validating, on the authenticating server, the authentication information;

determining, by the authenticating server, a DNS action based on the validation of the authentication information, wherein the DNS action comprises at least one of: sending a response message with an IP address, a network layer address or service location address, delaying sending a response message, sending a response message with an IP address corresponding to a website address containing authentication instructions, and responding with an alternative IP address corresponding to a special version of a resource configured to look just like the resource; and

executing, on the authenticating server, the DNS action.

20. The non-transitory computer-readable media of claim 19 , wherein authentication information is added to the DNS resolution request by a device other than a device that originates the DNS resolution request.

21. The non-transitory computer-readable media of claim 19 , wherein the DNS resolution request further includes one or more of: a source network layer address, a username/password combination, an encrypted data package, a security certificate, or hardware identification information.

22. The non-transitory computer-readable media of claim 19 , wherein the method comprises:

receiving, at the authenticating server, authentication information from a resource server for a particular user; and

updating the authenticating server to store the authentication information.

23. The non-transitory computer-readable media of claim 19 , wherein the IP address, the network layer address or the service location address comprises an individualized network layer address or service location address corresponding to a one-time-use address.

24. The non-transitory computer-readable media of claim 19 , wherein the IP address, the network layer address or the service location address comprises an individualized network layer address or service location address corresponding to an address assigned to a particular user.

25. The non-transitory computer-readable media of claim 19 , wherein delaying sending a message comprises:

determining that a DNS request was received from a particular user previously;

determining that a DNS response was delayed for a first time period; and

delaying sending a message by a second time period, wherein the second time period is greater than the first time period.

26. The non-transitory computer-readable media of claim 19 , wherein the DNS action comprises: sending a response message with an IP

address corresponding to a server delivering a particular class.

27. The non-transitory computer-readable media of claim 19 , wherein the method comprises:

determining a billing event based on the validation of the authentication information, and

billing a client based on the billing event.

28. A method for authenticating a DNS request, comprising:

receiving, at an authenticating server comprising an electronic processor, a DNS resolution request from a user, wherein the request includes a domain name to be resolved and an authentication certificate, wherein the authentication certificate was issued by a community authority trust in response to a request for identification authentication by the user, and wherein authentication certificate was added to the DNS resolution request by a device other than a device that originates the DNS resolution request;

validating, on the authenticating server comprising an electronic processor, the authentication certificate;

determining, by the authenticating server comprising an electronic processor, a network layer address or service location address based on the validation of the authentication certificate; and

sending the network layer address to the user.

29. The method of claim 28 , wherein the authentication certificate indicates the authentication of a group of users.

30. The method of claim 28 , wherein the DNS resolution request also includes certificate authority credentials of the community authority trust.

31. The method of claim 28 , wherein the authentication certificate contains permission data corresponding to the DNS resolution request.

32. The method of claim 31 , wherein the DNS action comprises:

determining the network layer address or service location address corresponding to the DNS resolution request based on the permission data; and

sending a signal to a resource server, wherein the signal causes the resource server to provision the network layer address or service location address.