US 11,750,562 B2
System and method for leak prevention for domain name system requests
Jonathan Alexander Thorold Barnett, Lafayette, CO (US)
Assigned to WEBROOT INC., Broomfield, CO (US)
Filed by Webroot Inc., Broomfield, CO (US)
Filed on Jun. 10, 2021, as Appl. No. 17/344,400.
Claims priority of provisional application 63/037,425, filed on Jun. 10, 2020.
Prior Publication US 2021/0392110 A1, Dec. 16, 2021
Int. Cl. H04L 29/06 (2006.01); H04L 9/40 (2022.01); H04L 61/4511 (2022.01); H04L 67/60 (2022.01)
CPC H04L 63/0236 (2013.01) [H04L 61/4511 (2022.05); H04L 63/10 (2013.01); H04L 63/20 (2013.01); H04L 67/60 (2022.05)] 20 Claims
OG exemplary drawing
 
1. A method for DNS resolution, the method comprising:
on a client device, disabling access at a client operating system on the client device to a DNS resolver external to the client device;
enabling access at the client operating system by a DNS protection agent at the client device to the DNS protection agent for resolving DNS server addresses using a DNS protection server, wherein the DNS protection agent is locally installed at the client device;
generating an outbound initial DNS request by an application executing on the client device, the outbound initial DNS request designating an Internet address for an Internet resource and specifying the DNS resolver;
detecting, by the DNS protection agent at a port of the client device associated with a DNS security protocol, the outbound initial DNS request from the application;
blocking the outbound initial DNS request to the DNS resolver from the application;
receiving, at the DNS protection agent, a redirected DNS request from the application, wherein the redirected DNS request was redirected to the DNS protection agent by the operating system of the client device;
transmitting, using the DNS protection agent, the redirected DNS request to the DNS protection server to resolve the Internet address; and
receiving a response from the DNS protection server at the DNS protection agent and forwarding the response to the application on the client device.