公开(公告)号：EP2611112A1

公开(公告)日：2013-07-03

申请号：EP12197268.1

申请日：2012-12-14

申请人： Verisign, Inc.

发明人： Gould, James ,  Tidwell, Paul ,  Lavu, Ramana Murthy ,  Anderson, Marc ,  Arians, Lambert

IPC分类号： H04L29/12

CPC分类号： H04L61/302 ,  H04L61/1511

摘要： Systems and methods for creating a new domain, such as a top-level domain or a second-level domain, make use of a Domain Manager that enables a user to enter data that is necessary or optional to implement the creation of a new domain. Systems such as, for example, a Registry and one or more Registrars, may use the data defined by the Domain Manager to create a new domain.

摘要翻译： 用于创建新域（如顶级域或二级域）的系统和方法利用域管理器，使用户能够输入必要或可选的数据来实现新域的创建。 诸如注册表和一个或多个注册服务商的系统可以使用由域管理器定义的数据来创建新的域。

公开(公告)号：EP2518970A1

公开(公告)日：2012-10-31

申请号：EP12002985.5

申请日：2012-04-27

申请人： Verisign, Inc.

发明人： Smith, David ,  Gould, James ,  Essawi, Tarik ,  Blacka, David ,  Veeramachani, Srikanth

IPC分类号： H04L29/06 ,  H04L29/12

CPC分类号： H04L63/123 ,  H04L61/1511

摘要： Systems and methods of performing incremental DNSSEC signing at a registry are described in which digital signature operations may be performed as part of a single transaction including DNS add, update, and/or delete operations and the like. Exemplary methods may include receiving a domain command from a requester, the domain command including an identifier of a domain. The received domain command may be executed with respect to data stored by the registry for the domain. As part of an individual transaction including the execution of the domain command, the registry may also sign DNSSEC records for the domain using a private key of an authoritative server. After the DNSSEC records have been signed, the registry may incrementally publish the signed DNSSEC records to a separate server. Exemplary methods may also include "look-aside" operations in which, for example, add, update, and/or delete operations may be executed on data stored in a registry database and reported to a requester, prior to applying digital-signatures to the DNSSEC data. After reporting that the instructions have been executed, the registry may generate a digital signature based on the add, update, and/or delete changes, and commit the digital signature to a registry resolution database.

摘要翻译： 描述了在注册表中执行增量DNSSEC签名的系统和方法，其中数字签名操作可以作为包括DNS添加，更新和/或删除操作等的单个事务的一部分来执行。 示例性方法可以包括从请求者接收域命令，所述域命令包括域的标识符。 接收到的域命令可以针对域注册机构存储的数据执行。 作为包括执行域命令的单个事务的一部分，注册管理机构也可以使用授权服务器的私钥为该域签署DNSSEC记录。 DNSSEC记录签署后，注册机构可以将签名的DNSSEC记录递增发布到单独的服务器。 示例性方法还可以包括在向数字签名应用数字签名之前对其中例如添加，更新和/或删除操作的“旁视”操作可以对存储在注册表数据库中的数据执行并且向请求者报告 DNSSEC数据。 报告指令已执行后，注册管理机构可根据添加，更新和/或删除更改生成数字签名，并将数字签名提交到注册表解析数据库。