IP Library Granted Patent US 12,500,861
Granted Patent B2
US 12,500,861 · App. 18/535,480 · Granted Dec 16, 2025

Resolving domain name system (DNS) requests via proxy mechanisms

Inventors: Rodney Lance Joffe (Tempe, AZ); David Link King (Cave Creek, AZ)
Assignee: DigiCert, Inc.
H04L61/4511H04L61/4552H04L61/59H04L67/56H04L2101/618
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 12,500,861
App. No.
18/535,480
Granted
Dec 16, 2025
Kind
B2
Abstract

Systems and methods are described herein for providing proxy mechanisms for DNS services, such as resolving DNS requests. In some embodiments, the systems and methods establish a Proxy DNS module at a DNS resolver of an internet service provider, and access, with the proxy DNS module, DNS queries destined for a public name server. The name server may be accessible by the DNS resolver via a publically-accessible network. Further, the systems and methods may route the accessed DNS queries to a private name server associated with the proxy DNS module and accessible via a private communications channel, and receive, from the private name server and via the private communications channel, IP addresses associated with the DNS queries.

Claims (64)

1 . A computer-implemented method of operating an internet service provider (ISP) domain name server (DNS) resolver, the computer-implemented method comprising:

receiving, via a communication port, a DNS request;

querying, by one or more computing devices of the ISP DNS resolver, a local cache of the ISP DNS resolver to determine whether information stored by the local cache is sufficient to resolve the DNS request;

if the information stored is sufficient to resolve the DNS request:

extracting internet protocol (IP) addresses of top level domain (TLD) name servers of a TLD of a requested domain name from the DNS request from the local cache; and

returning the IP addresses to a requesting device;

if the information stored is not sufficient to resolve the DNS request:

sending the DNS request to a second local cache, a local resolver, or a server of the ISP DNS resolver to perform DNS services locally;

after sending the DNS request to the second local cache, the local resolver, or the server within the ISP DNS resolver, intercepting the DNS request, ending local processes from locally resolving the DNS request, and sending the DNS request to one or more known remote name servers to obtain the IP addresses of the TLD name servers for the TLD of the requested domain name in the DNS request; and

sending the IP addresses to the requesting device.

2 . The computer-implemented method of claim 1 , further comprising establishing a secure tunnel between the ISP DNS resolver and the one or more known remote name servers prior to sending the DNS request to the one or more known remote name servers.

3 . The computer-implemented method of claim 2 , further comprising:

receiving a master file of DNS records from the one or more known remote name servers via the secure tunnel; and

storing the master file of DNS records within the server within the ISP DNS resolver.

4 . The computer-implemented method of claim 2 , further comprising:

periodically receiving updates via the secure tunnel from the one or more known remote name servers to update DNS records; and

storing the updates in a master file of DNS records within the server within the ISP DNS resolver.

5 . The computer-implemented method of claim 1 , wherein the DNS services comprise:

searching a local server to obtain the IP addresses of the TLD name servers for the TLD of the requested domain; and

returning the IP addresses to the requesting device.

6 . The computer-implemented method of claim 5 , wherein the search is a recursive search.

7 . A non-transitory computer readable medium storing instructions for operating an internet service provider (ISP) domain name server (DNS) resolver, that when executed by one or more processors, cause the one or more processors to perform operations comprising:

receiving, via a communication port, a DNS request;

querying, by one or more computing devices of the ISP DNS resolver, a local cache of the ISP DNS resolver to determine whether information stored by the local cache is sufficient to resolve the DNS request;

if the information stored is sufficient to resolve the DNS request:

extracting internet protocol (IP) addresses of top level domain (TLD) name servers of a TLD of a requested domain name from the DNS request from the local cache; and

returning the IP addresses to a requesting device;

if the information stored is not sufficient to resolve the DNS request:

sending the DNS request to a second local cache, a local resolver, or a server of the ISP DNS resolver to perform DNS services locally; and

after sending the DNS request to the second local cache, the local resolver, or the server within the ISP DNS resolver, intercepting the DNS request, ending local processes from locally resolving the DNS request, and sending the DNS request to one or more known remote name servers to obtain the IP addresses of the TLD name servers for the TLD of the requested domain name in the DNS request; and

sending the IP addresses to the requesting device.

8 . The non-transitory computer readable medium of claim 7 , wherein the operations further comprise establishing a secure tunnel between the ISP DNS resolver and the one or more known remote name servers prior to sending the DNS request to the one or more known remote name servers.

9 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise:

receiving a master file of DNS records from the one or more known remote name servers via the secure tunnel; and

storing the master file of DNS records within the server within the ISP DNS resolver.

10 . The non-transitory computer readable medium of claim 8 , wherein the operations further comprise:

periodically receiving updates via the secure tunnel from the one or more known remote name servers to update DNS records; and

storing the updates in a master file of DNS records within the server within the ISP DNS resolver.

11 . The non-transitory computer readable medium of claim 7 , wherein the DNS services comprise:

searching a local server to obtain the IP addresses of the TLD name servers for the TLD of the requested domain; and

returning the IP addresses to the requesting device.

12 . The non-transitory computer readable medium of claim 11 , wherein the search is a recursive search.

13 . An internet service provider (ISP) domain name server (DNS) resolver comprising:

a memory storing instructions; and

one or more processors, coupled to the memory, and configured to process the stored instructions to:

receive, via a communication port, a DNS request;

query a local cache of the ISP DNS resolver to determine whether information stored by the local cache is sufficient to resolve the DNS request;

if the information stored is sufficient to resolve the DNS request:

extract internet protocol (IP) addresses of top level domain (TLD) name servers of a TLD of a requested domain name from the DNS request from the local cache; and

return the IP addresses to a requesting device;

if the information stored is not sufficient to resolve the DNS request:

send the DNS request to a second local cache, a local resolver, or a server of the ISP DNS resolver to perform DNS services locally; and

after the DNS request is sent to the second local cache, the local resolver, or the server within the ISP DNS resolver, intercept the DNS request, end local processes from locally resolving the DNS request, and send the DNS request to one or more known remote name servers to obtain the IP addresses of the TLD name servers for the TLD of the requested domain name in the DNS request; and

send the IP addresses to the requesting device.

14 . The ISP DNS resolver of claim 13 , wherein the one or more processors are further configured to establish a secure tunnel between the ISP DNS resolver and the one or more known remote name servers prior to sending the DNS request to the one or more known remote name servers.

15 . The ISP DNS resolver of claim 14 , wherein the one or more processors are further configured to:

receive a master file of DNS records from the one or more known remote name servers via the secure tunnel; and

store the master file of DNS records within the server within the ISP DNS resolver.

16 . The ISP DNS resolver of claim 14 , wherein the one or more processors are further configured to:

periodically receive updates via the secure tunnel from the one or more known remote name servers to update DNS records; and

store the updates in a master file of DNS records within the server within the ISP DNS resolver.

17 . The ISP DNS resolver of claim 13 , wherein the DNS services comprise:

searching a local server to obtain the IP addresses of the TLD name servers for the TLD of the requested domain; and

returning the IP addresses to the requesting device.

Assignments (6)
ASSIGNMENT OF SECURITY INTERESTS IN INTELLECTUAL PROPERTY (FIRST LIEN), RECORDED ON JANUARY 23, 2025 AT REEL 069991 FRAME 0390 Recorded Sep 24, 2025
From: UBS AG, STAMFORD BRANCH, AS RESIGNING AGENT
To: HPS INVESTMENT PARTNERS, LLC, AS SUCCESSOR AGENT
Reel/Frame 072928/0289 →
FIRST LIEN INTELLECTUAL PROPERTY AGREEMENT SUPPLEMENT Recorded Sep 24, 2025
From: DIGICERT, INC.
To: HPS INVESTMENT PARTNERS, LLC, AS COLLATERAL AGENT
Reel/Frame 072947/0203 →
SECOND LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT SUPPLEMENT Recorded Jul 30, 2025
From: DIGICERT, INC.
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 072295/0001 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Jul 21, 2025
From: VERCARA, LLC
To: DIGICERT, INC.
Reel/Frame 071781/0348 →
SECOND LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Jan 23, 2025
From: VERCARA, LLC
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 069991/0330 →
FIRST LIEN INTELLECTUAL PROPERTY SECURITY AGREEMENT Recorded Jan 23, 2025
From: VERCARA, LLC
To: UBS AG, STAMFORD BRANCH, AS COLLATERAL AGENT
Reel/Frame 069991/0390 →