公开(公告)号：US20250168014A1

公开(公告)日：2025-05-22

申请号：US19033124

申请日：2025-01-21

Applicant: CLOUDFLARE, INC.

Inventor： Watson Bernard Ladd ,  Alexander Andrew Davidson ,  Marwan Fayed ,  Armando Faz Hernández ,  Sai Krishna Deepak Maram ,  Nicholas Thomas Sullivan

IPC: H04L9/32 ,  G06F21/32 ,  H04L9/14

Abstract: A client device receives a challenge request from a server to prove that internet traffic was initiated by a human user through verifying a physical interaction between a human user and a hardware component. The client device causes a prompt to be displayed to perform the physical interaction with the hardware component. A cryptographic attestation is received that includes an attestation signature that is generated after confirmation that the physical interaction was performed with the hardware component. A zero-knowledge proof of the attestation signature is generated and transmitted to the server for verification. The client device receives the requested content responsive to the server verifying the validity of the zero-knowledge proof.

公开(公告)号：US20220182354A1

公开(公告)日：2022-06-09

申请号：US17503763

申请日：2021-10-18

Applicant: CLOUDFLARE, INC.

Inventor： Marwan Fayed ,  Pavel Odintsov ,  Sami Matias Kerola

IPC: H04L29/12 ,  H04L29/06

Abstract: An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.

公开(公告)号：US12206789B2

公开(公告)日：2025-01-21

申请号：US17217703

申请日：2021-03-30

Applicant: CLOUDFLARE, INC.

Inventor： Watson Bernard Ladd ,  Alexander Andrew Davidson ,  Marwan Fayed ,  Armando Faz Hernández ,  Sai Krishna Deepak Maram ,  Nicholas Thomas Sullivan

IPC: H04L9/32 ,  G06F21/32 ,  H04L9/14

Abstract: A client device receives a challenge request from a server to prove that internet traffic was initiated by a human user through verifying a physical interaction between a human user and a hardware component. The client device causes a prompt to be displayed to perform the physical interaction with the hardware component. A cryptographic attestation is received that includes an attestation signature that is generated after confirmation that the physical interaction was performed with the hardware component. A zero-knowledge proof of the attestation signature is generated and transmitted to the server for verification. The client device receives the requested content responsive to the server verifying the validity of the zero-knowledge proof.

公开(公告)号：US20220321354A1

公开(公告)日：2022-10-06

申请号：US17217703

申请日：2021-03-30

Applicant: CLOUDFLARE, INC.

Inventor： Watson Bernard Ladd ,  Alexander Andrew Davidson ,  Marwan Fayed ,  Armando Faz Hernández ,  Sai Krishna Deepak Maram ,  Nicholas Thomas Sullivan

IPC: H04L9/32 ,  H04L9/14 ,  G06F21/32

Abstract: A client device receives a challenge request from a server to prove that internet traffic was initiated by a human user through verifying a physical interaction between a human user and a hardware component. The client device causes a prompt to be displayed to perform the physical interaction with the hardware component. A cryptographic attestation is received that includes an attestation signature that is generated after confirmation that the physical interaction was performed with the hardware component. A zero-knowledge proof of the attestation signature is generated and transmitted to the server for verification. The client device receives the requested content responsive to the server verifying the validity of the zero-knowledge proof.

公开(公告)号：US11153265B1

公开(公告)日：2021-10-19

申请号：US17116864

申请日：2020-12-09

Applicant: CLOUDFLARE, INC.

Inventor： Marwan Fayed ,  Pavel Odintsov ,  Sami Matias Kerola

IPC: G06F15/16 ,  H04L29/12 ,  H04L29/06

Abstract: An authoritative domain name system (DNS) server receives a DNS query for an address record for a hostname. The DNS server selects an IP address from multiple IP addresses to include in an answer to the DNS query, where each IP address is capable of being selected to be included in the answer regardless of the hostname being queried, where multiple servers of a distributed cloud computing network are capable of receiving traffic at each IP address, and where none of the IP addresses identify a particular server of the distributed cloud computing network. The authoritative DNS server transmits an answer to the DNS query that includes the selected IP address. Sometime after, one of the servers of the distributed cloud computing network receives a request for content that is addressed to the selected IP address and processes the request.