Systems and methods for secure authorization of registry functions
Systems, methods, and computer-readable storage media for enabling secure transfer of Internet domains between registrars. An example method can include receiving, at a registry, a request from a first registrar for information associated with an object recorded in the registry and registered by the first registrar, then generating, at the registry, an authorization code, the authorization code having an expiration. The registry can then transmit, to the first registrar, the authorization code, which in turn can be given to the registrant. The registrant can forward the authorization code to the second registrar, and the registry can receive, from a second registrar before the expiration has been reached: the authorization code and a transfer request for the object, the transfer request identifying a transfer of the object from the first registrar to the second registrar. At that point the registry can verify the authorization code authorize the transfer request of the object from the first registrar to the second registrar.
1. A method for securely authorizing a registry operation comprising:
generating, at a registry, an authorization code, wherein the authorization code is configured to authorize a registry function;
transmitting, from the registry to a first registrar, the authorization code;
receiving, from a second registrar:
the authorization code; and
a request for the registry function on a first registry object;
verifying the authorization code; and
authorizing the registry function for the first registry object.
2. The method of claim 1 , wherein the authorization code comprises at least one attribute, wherein the at least one attribute comprises one or more predetermined registry functions.
3. The method of claim 2 , wherein the one or more predetermined registry functions are based on a request from the first registrar.
4. The method of claim 2 , wherein the one or more predetermined registry functions are based on content of a registry command.
5. The method of claim 4 , wherein the registry command is a domain info command.
6. The method of claim 2 , wherein the one or more predetermined registry functions defaults to a registrar transfer.
7. The method of claim 2 , wherein the one or more predetermined registry functions comprises registrar-transfer, re-sale transfer, or dnsprovider-transfer.
8. The method of claim 2 , wherein the at least one attribute further comprises an expiration of the authorization code.
9. The method of claim 8 , wherein the at least one attribute further comprises an identifier of a domain name.
10. The method of claim 1 , wherein the authorization code comprises at least one attribute, wherein the at least one attribute comprises an expiration of the authorization code, wherein the authorization code is received from the second registrar before the expiration of the authorization code.
11. A system comprising:
a processor; and
a non-transitory computer-readable storage medium having instructions stored which, when executed by the processor, cause the processor to perform operations comprising:
generating, at a registry, an authorization code, wherein the authorization code is configured to authorize a registry function;
transmitting, from the registry to a first registrar, the authorization code;
receiving, from a second registrar:
the authorization code; and
a request for the registry function on a first registry object;
verifying the authorization code; and
authorizing the registry function for the first registry object.
12. The system of claim 11 , wherein the authorization code comprises at least one attribute, wherein the at least one attribute comprises one or more predetermined registry functions.
13. The system of 12 , wherein the one or more predetermined registry functions are based on a request from the first registrar.
14. The system of claim 12 , wherein the one or more predetermined registry functions are based on content of a registry command.
15. The system of claim 12 , wherein the one or more predetermined registry functions defaults to a registrar transfer.
16. A non-transitory computer-readable storage medium having instructions stored which, when executed by a computing device, cause the computing device to perform operations comprising:
generating, at a registry, an authorization code, wherein the authorization code is configured to authorize a registry function;
transmitting, from the registry to a first registrar, the authorization code;
receiving, from a second registrar:
the authorization code; and
a request for the registry function on a first registry object;
verifying the authorization code; and
authorizing the registry function for the first registry object.
17. The non-transitory computer-readable storage medium of claim 16 , wherein the authorization code comprises at least one attribute, wherein the at least one attribute comprises one or more predetermined registry functions.
18. The non-transitory computer-readable storage medium of claim 17 , wherein the one or more predetermined registry functions are based on a request from the first registrar.
19. The non-transitory computer-readable storage medium of claim 17 , wherein one or more predetermined registry functions are based on content of a registry command.
20. The non-transitory computer-readable storage medium of claim 17 , wherein one or more predetermined registry functions defaults to a registrar transfer.