IP Library › Granted Patent US 8,140,689
Granted Patent B2
US 8,140,689 · App. 13/096,673 · Granted Mar 20, 2012

Establishing unique sessions for DNS subscribers

Assignee: Kount Inc.
View Patent ↗
Loading inventors, assignments & file history…
Monitor This Case
Get email alerts when status or documents change.
Order Certified Copies
Most orders are placed with the USPTO same day — all within 24 business hours.
Order via The Patent Place →
Pre-filled with this patent's details
Quick Facts
Patent No.
US 8,140,689
App. No.
13/096,673
Granted
Mar 20, 2012
Kind
B2
Abstract

A system establishes virtual DNS servers that are supported by a DNS server. Target IP addresses are assigned for the virtual DNS servers. Network capable devices are uniquely assigned to the virtual DNS servers for domain name resolution. Each network capable device accesses the communication network through a corresponding network device associated with a corresponding source IP address. A client's service plan is assigned to a first network capable device used by the client. The service plan is implemented through a DNS request under a session established between the first network capable device and its assigned first virtual DNS server. The session is uniquely identified by a first source IP address of a first network device used by the first network capable device to access the communication network and a first target IP address of the first virtual DNS server.

Claims (40)

1. A method for restricting access to content on a network, the method comprising:

establishing a plurality of virtual DNS servers that are supported by a DNS server;

assigning a plurality of target IP addresses for the plurality of virtual DNS servers, wherein each target IP address comprises a first IP subaddress identifying the DNS server, and a second IP subaddress identifying a corresponding virtual DNS server;

receiving a request to access network content from a client;

uniquely assigning a plurality of network capable devices to the plurality of virtual DNS servers for domain name resolution, wherein each of the plurality of network capable devices accesses a communication network through a corresponding network device associated with a corresponding source IP address;

assigning a service plan of the client to a first network capable device being used to access the communication network by the client, the service plan being implemented through a DNS request under a session established between the first network capable device and the first virtual DNS server assigned to the first network capable device; and

restricting access to the requested network content used by the first network capable device.

2. The method of claim 1 , wherein the session is uniquely identified by a combination of a first source IP address associated with a first network device used by the first network capable device to access the communication network, and a first target IP address of the first virtual DNS server.

3. The method of claim 1 , wherein restricting access to the requested network content comprises declining to resolve one or more domain names associated with the request.

4. The method of claim 1 , wherein assigning a service plan further comprises:

assigning a plurality of service plans of a plurality of clients to the plurality of network capable devices used for accessing the communication network as implemented through a corresponding DNS request of a corresponding session, wherein each session is uniquely identified by a corresponding combination of source IP address and target IP address related to an associated network device used to make the corresponding DNS request.

5. The method of claim 1 , wherein uniquely assigning a plurality of network capable devices further comprises:

uniquely assigning a first plurality of network capable devices to the plurality of virtual DNS servers for domain name resolution service, wherein the first plurality of network capable devices accesses the communication network through a second network device associated with a second source IP address, and wherein each service plan, associated with a corresponding network capable device, is uniquely identified through a first combination of the second source IP address and target IP subaddress associated with the corresponding network capable device.

6. The method of claim 1 , wherein the communication network comprises the Internet.

7. The method of claim 1 , wherein the corresponding network device comprises a router.

8. The method of claim 1 , wherein assigning a plurality of target IP addresses further comprises:

assigning the second IP subaddress a unique number in an octet of a corresponding target IP address.

9. The method of claim 1 , wherein the assigning a service plan further comprises:

uniquely identifying the service plan with the first network capable device through the combination comprising the source IP address and an associated second IP subaddress of the first target IP address.

10. The method of claim 1 , wherein the network content comprises an online retail store.

11. A computer program product for restricting access to content on a network, the computer program product comprising a computer-readable storage medium containing computer program code for:

establishing a plurality of virtual DNS servers that are supported by a DNS server;

assigning a plurality of target IP addresses for the plurality of virtual DNS servers, wherein each target IP address comprises a first IP subaddress identifying the DNS server, and a second IP subaddress identifying a corresponding virtual DNS server;

receiving a request to access network content from a client;

uniquely assigning a plurality of network capable devices to the plurality of virtual DNS servers for domain name resolution, wherein each of the plurality of network capable devices accesses a communication network through a corresponding network device associated with a corresponding source IP address;

assigning a service plan of the client to a first network capable device being used to access the communication network by the client, the service plan being implemented through a DNS request under a session established between the first network capable device and the first virtual DNS server assigned to the first network capable device; and

restricting access to the requested network content used by the first network capable device.

12. The computer program product of claim 11 , wherein the session is uniquely identified by a combination of a first source IP address associated with a first network device used by the first network capable device to access the communication network, and a first target IP address of the first virtual DNS server.

13. The computer program product of claim 11 , wherein restricting access to the requested network content comprises declining to resolve one or more domain names associated with the request.

14. The computer program product of claim 11 , wherein assigning a service plan further comprises:

assigning a plurality of service plans of a plurality of clients to the plurality of network capable devices used for accessing the communication network as implemented through a corresponding DNS request of a corresponding session, wherein each session is uniquely identified by a corresponding combination of source IP address and target IP address related to an associated network device used to make the corresponding DNS request.

15. The computer program product of claim 11 , wherein uniquely assigning a plurality of network capable devices further comprises:

uniquely assigning a first plurality of network capable devices to the plurality of virtual DNS servers for domain name resolution service, wherein the first plurality of network capable devices accesses the communication network through a second network device associated with a second source IP address, and wherein each service plan, associated with a corresponding network capable device, is uniquely identified through a first combination of the second source IP address and target IP subaddress associated with the corresponding network capable device.

16. The computer program product of claim 11 , wherein the communication network comprises the Internet.

17. The computer program product of claim 11 , wherein the corresponding network device comprises a router.

18. The computer program product of claim 11 , wherein the assigning a plurality of target IP addresses further comprises:

assigning the second IP subaddress a unique number in an octet of a corresponding target IP address.

19. The computer program product of claim 11 , wherein the assigning a service plan further comprises:

uniquely identifying the service plan with the first network capable device through the combination comprising the source IP address and an associated second IP subaddress of the first target IP address.

20. The computer program product of claim 11 , wherein the network content comprises an online retail store.

Assignments (2)
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 9, 2016
From: BARBER, TIMOTHY P.
To: KEYNETICS INC.
Reel/Frame 037935/0687 →
ASSIGNMENT OF ASSIGNOR'S INTEREST Recorded Mar 9, 2016
From: KEYNETICS INC.
To: KOUNT INC.
Reel/Frame 038045/0453 →
Continuity (3)
Continuation 12228203 · Aug 11, 2008
Provisional Application 60964373 · Aug 9, 2007
Related Publication 20110202665A1 · Aug 18, 2011