Granted Patent B2

US 12,244,579 · App. 18/805,871 · Granted Mar 4, 2025

Inventors: Qing Wang (Beijing, CN); Jian Wang (Beijing, CN)

Assignee: Beijing Volcano Engine Technology Co., Ltd.

H04L63/0435H04L63/20

Abstract

Claims (58)

1. A domain name encryption method based on a content distribution network (CDN), being applied to a CDN system, and comprising:

receiving, ny the CDN system, an access request for an initial server sent by a terminal to access a destination node;

acquiring, by the CDN system in response to determining that the initial server needs to be redirected to a target server, a synthetic record domain name of the target server, wherein the synthetic record domain name carrying a domain name resolution result of the target server; and

encrypting the synthetic record domain name to obtain an encrypted synthetic record domain name by encrypting the domain name resolution of the target server, and sending the encrypted synthetic record domain name to the terminal so as to enable the terminal to send an access request to the destination node via the target server.

2. The method according to claim 1 , wherein encrypting the synthetic record domain name comprises:

encrypting the domain name resolution result in the synthetic record domain name to obtain the encrypted synthetic record domain name comprising the encrypted domain name resolution result.

3. The method according to claim 2 , wherein encrypting the domain name resolution result comprises:

acquiring a target key and a target offset value; and

encrypting the domain name resolution result based on the target key and the target offset value, to obtain the encrypted synthetic record domain name.

4. The method according to claim 3 , further comprising:

encoding the encrypted domain name resolution result in a target encoding scheme to obtain encoded data;

performing target processing on the encoded data to obtain processed target encoded data, wherein the target processing is used for removing target characters from the encoded data; and

obtaining the encrypted synthetic record domain name based on an identifier of the target key, the target offset value, and the encrypted domain name resolution result.

5. The method according to claim 4 , wherein the target encoding scheme is base32 encoding scheme.

6. The method according to claim 2 , further comprising:

performing, in a case that the domain name resolution result belongs to IPv6, character segmentation on an encrypted character string in the encrypted domain name resolution result, to obtain the encrypted domain name resolution result.

7. The method according to claim 1 , further comprising:

acquiring a domain name identifier corresponding to the domain name resolution result; and

adding the domain name identifier to the encrypted synthetic record domain name, as a prefix of the encrypted synthetic record domain name.

8. The method according to claim 1 , wherein the initial server needs to be redirected to a target server in a case that the initial server is not the optimal edge node for the terminal.

9. A non-transitory computer-readable storage medium, wherein when instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is caused to execute the method according to claim 1 .

10. A domain name decryption method based on a content distribution network (CDN), being applied to a domain name system (DNS), and comprising:

receiving a domain name resolution request sent by a terminal, the domain name resolution request comprising an encrypted synthetic record domain, which is obtained by encrypting a synthetic record domain name of a target server carrying a domain name resolution result of the target server within the CDN;

decrypting, by the DNS, the encrypted synthetic record domain name to obtain the domain name resolution result of the target server; and

sending the domain name resolution result to the terminal so as to enable the terminal to send an access request to a destination node via the target server within the CDN.

11. The method according to claim 10 , wherein decrypting the encrypted synthetic record domain name to obtain the domain name resolution result comprises:

acquiring a target key corresponding to the encrypted synthetic record domain name, and acquiring a target offset value in the encrypted synthetic record domain name; and

decrypting the encrypted synthetic record domain name based on the target key and the target offset value, to obtain the domain name resolution result.

12. The method according to claim 11 , wherein decrypting the encrypted synthetic record domain name based on the target key and the target offset value comprises:

acquiring an encrypted domain name resolution result in the encrypted synthetic record domain name;

performing target processing on the encrypted domain name resolution result to obtain a processed encrypted domain name resolution result, wherein the target processing comprises adding a target character in the encrypted domain name resolution result; and

decrypting the processed encrypted domain name resolution result based on the target key and the target offset value, to obtain the domain name resolution result.

13. A domain name decryption apparatus based on a content distribution network (CDN), being applied to a domain name system (DNS), and comprising:

at least one processor; and

a memory for storing instructions executable by the at least one processor;

wherein the instructions, when executed by the at least one processor, cause the apparatus to perform the method according to claim 10 .

14. A non-transitory computer-readable storage medium, wherein when instructions in the computer-readable storage medium are executed by a processor of an electronic device, the electronic device is caused to execute the method according to claim 10 .

15. A domain name encryption apparatus based on a content distribution network (CDN), being applied to a CDN system, and comprising:

at least one processor; and

a memory for storing instructions executable by the at least one processor;

wherein the instructions, when executed by the at least one processor, cause the apparatus to:

receive, by the CDN system, an access request for an initial server sent by a terminal to access a destination node;

acquire, by the CDN system in response to determining that the initial server needs to be redirected to a target server, a synthetic record domain name of the target server, wherein the synthetic record domain name carrying a domain name resolution result of the target server; and

encrypt the synthetic record domain name to obtain an encrypted synthetic record domain name by encrypting the domain name resolution result of the target server, and send the encrypted synthetic record domain name to the terminal so as to enable the terminal to send an access request to the destination node via the target server.

16. The apparatus according to claim 15 , wherein the instructions causing the apparatus to encrypt the synthetic record domain name further cause the apparatus to:

encrypt the domain name resolution result in the synthetic record domain name to obtain the encrypted synthetic record domain name comprising the encrypted domain name resolution result.

17. The apparatus according to claim 16 , wherein the instructions causing the apparatus to encrypt the domain name resolution result further cause the apparatus to:

acquire a target key and a target offset value; and

encrypt the domain name resolution result based on the target key and the target offset value, to obtain the encrypted synthetic record domain name.

18. The apparatus according to claim 17 , wherein the instructions further cause the apparatus to:

encode the encrypted domain name resolution result in a target encoding scheme to obtain encoded data;

perform target processing on the encoded data to obtain processed target encoded data, wherein the target processing is used for removing target characters from the encoded data; and

obtain the encrypted synthetic record domain name based on an identifier of the target key, the target offset value, and the encrypted domain name resolution result.

19. The apparatus according to claim 16 , the instructions further cause the apparatus to:

perform, in a case that the domain name resolution result belongs to IPv6, character segmentation on an encrypted character string in the encrypted domain name resolution result, to obtain the encrypted domain name resolution result.

20. The apparatus according to claim 15 , the instructions further cause the apparatus to:

acquire a domain name identifier corresponding to the domain name resolution result; and

add the domain name identifier to the encrypted synthetic record domain name, as a prefix of the encrypted synthetic record domain name.

Assignments (3)

Priority Claims (1)

Continuity (1)

References Cited (9)