US 12,445,433 B1
Shared authentication via DNS request routing
Seven Starosta, Brooklyn, NY (US); Jeffrey M. Tejnecky, Chesterfield, VA (US); and Brandon Krouse, Frisco, TX (US)
Assigned to Capital One Services, LLC, McLean, VA (US)
Filed by Capital One Services, LLC, McLean, VA (US)
Filed on Apr. 10, 2024, as Appl. No. 18/631,620.
Int. Cl. H04L 9/40 (2022.01)
CPC H04L 63/083 (2013.01) [H04L 63/0435 (2013.01); H04L 63/102 (2013.01)] 17 Claims
OG exemplary drawing
 
1. A computing device configured to manage authentication for a Domain Name System (DNS) using shared authentication credentials of a first authentication framework, the computing device comprising:
one or more processors; and
memory storing instructions that, when executed by the one or more processors, cause the computing device to:
receive, via an Application Programming Interface (API), a first DNS request comprising:
first authentication credentials for a first user; and
a first requested change to a first DNS Canonical Name (CNAME) record;
query a first authentication database corresponding to the first authentication framework to determine whether the first authentication credentials are associated with one or more existing authentication tokens;
based on determining that the first authentication credentials are not associated with the one or more existing authentication tokens, determine, by querying a second authentication database corresponding to a second authentication framework different from the first authentication framework, whether the first authentication credentials are valid by comparing the first authentication credentials to a blocklist;
based on a determination that the first authentication credentials are valid, generate a modified DNS request comprising:
the first requested change to the first DNS CNAME record; and
the shared authentication credentials of the first authentication framework; and
transmit the modified DNS request to a DNS server.