WO2012142205A1

WO2012142205A1 - Systems and methods for detecting the stockpiling of domain names

Info

Publication number: WO2012142205A1
Application number: PCT/US2012/033189
Authority: WO
Inventors: Andrew Simpson
Original assignee: Verisign, Inc.
Priority date: 2011-04-13
Filing date: 2012-04-12
Publication date: 2012-10-18
Also published as: AU2012242839B2; US20120265748A1; AU2012242839A1; EP2697724A1; US9075886B2

Abstract

Systems, methods, and computer program products are provided for detecting the stockpiling of domain names. In one exemplary embodiment, there is provided a method for detecting a status of a domain name. The method may include receiving information related to the domain name from a registrar. The method may include crawling the at least one domain name, wherein the crawling receives first information located on a website associated with the domain name and receives second information related to a registration of the domain name. The method may also include storing the first information and the second information, wherein the crawling is initiated at a first time prior to expiration of the at least one domain name and a second time after expiration of the at least one domain name.

Description

SYSTEMS AND METHODS FOR DETECTING THE STOCKPILING OF

DOMAIN NAMES

RELATED APPLICATIONS

[001] This application claims priority to U.S. Patent Application No. 13/085,881, filed April 13, 201 1 , the entire content of which is incorporated herein by reference.

TECHNICAL FIELD

[002] The present disclosure generally relates to systems and methods for detecting the stockpiling of domain names. More particularly, the present invention relates to systems and methods for detecting changes associated with the domain name by determining if a registrar with which the domain name was originally registered has taken ownership of the domain name and begun "parking" it or whether the domain name has entered the public domain.

BACKGROUND

[003] If a user wants to register a domain name, the user may contact a registrar to register the domain name. The registrar may send the necessary domain name server (DNS) information to a registry. DNS is part of the Internet infrastructure that may translate readable domain names into Internet Protocol (IP) numbers for establishing TCP/IP communication over the Internet. DNS may allow users to refer to websites using the domain names (e.g.,

"www.example.com") rather than the numeric IP addresses associated with each website and assigned to computers on the Internet. Each domain name may be made up of a series of character strings separated by dots. In addition, each IP address may be hosted by a corresponding server.

[004] The registry may receive the DNS information, insert the information into a database, and transmit the information in Internet zone files so that domain names can be found by users. The registrar may check the availability of the requested domain name and inform the user if the domain name is available. If the domain name is available, the user may register the domain name for a period of time (e.g., one year). Upon registration, the domain name may be linked to a website. For example, the website "www.example.com" may be associated with the example.com domain. The domain name may be used to identify computer systems on the Internet.

[005] At the end of the registration period, the user may renew the domain name for another period of time or may cancel the registration. If the user renews, nothing changes, and the user may continue using the domain name. However, if the user does not renew, the registration may expire and other users may obtain the expired domain name. [006] Entities that sell domain names need to understand how a domain name is used, thereby providing an indication of how a user of a domain name may value the domain name. Accordingly, there is a need to know the status of domain names to determine if a domain name is active or expired, and, if a domain name is expired, if the expired domain name is parked and stockpiled by a registrar. To address these needs, systems and methods are needed to detect the stockpiling of domain names.

SUMMARY

[007] In one exemplary embodiment, there is provided a method for detecting the stockpiling of domain names. The method may include receiving information related to the domain name from a registrar. The method may include crawling the at least one domain name, wherein the crawling receives first information located on a website associated with the domain name and receives second information related to a registration of the domain name. The method may also include storing the first information and the second information, wherein the crawling is initiated at a first time prior to expiration of the at least one domain name and a second time after expiration of the at least one domain name.

[008] In another exemplary embodiment, there is provided a computer-readable recording medium storing a computer-executable program which, when executed by a processor, performs a method for detecting a status of a domain name. The method may include receiving information related to the domain name from a registrar. The method may also include crawling the at least one domain name, wherein the crawling receives first information located on a website associated with the domain name and receives second information related to a registration of the domain name. The method may also include storing the first information and the second information, wherein the crawling is initiated at a first time prior to expiration of the at least one domain name and a second time after expiration of the at least one domain name.

[009] In another exemplary embodiment, there is provided a computer system for detecting a status of a domain name, including a computer having memory and a processor. The computer system may include one or more systems that may include data and a detection service in communication with the one or more systems. The detection service may receive information related to the domain name from a registrar. The detection service may crawl the at least one domain name, wherein the crawling receives first information located on a website associated with the domain name and receives second information related to a registration of the domain name. The detection service may store the first information and the second information, wherein the crawling is initiated at a first time prior to expiration of the at least one domain name and a second time after expiration of the at least one domain name.

[010] It is to be understood that both the foregoing general description and the following detailed description are exemplary and explanatory only and are not restrictive of the invention, as claimed.

BRIEF DESCRIPTION OF THE DRAWINGS

[Oi l] The accompanying drawings, which are incorporated in and constitute a part of this disclosure, illustrate various embodiments and aspects of the present invention. In the drawings:

[012] Fig. 1 illustrates an exemplary computing system that can be used to implement embodiments of the invention;

[013] Fig. 2 illustrates an exemplary detection terminal that can be used to implement embodiments of the invention;

[014] Fig. 3 illustrates an exemplary computing terminal that can be used to implement embodiments of the invention; and

[015] Fig. 4 illustrates a flowchart of an exemplary method for determining the stockpiling of domain names consistent with an embodiment of the present invention.

DETAILED DESCRIPTION

[016] The following detailed description refers to the accompanying drawings.

Wherever possible, the same reference numbers are used in the drawings and the following description to refer to the same or similar parts. While several exemplary embodiments and features are described herein, modifications, adaptations and other implementations are possible, without departing from the spirit and scope of the invention. For example, substitutions, additions, or modifications may be made to the components illustrated in the drawings, and the exemplary methods described herein may be modified by substituting, reordering, or adding steps to the disclosed methods. Accordingly, the following detailed description does not limit the invention. Instead, the proper scope of the invention is defined by the appended claims.

System architecture

[017] By way of a non-limiting example, Fig. 1 illustrates a system 100 in which the features and principles of the present invention may be implemented. The number of components in system 100 is not limited to what is shown, and other variations in the number of arrangements of components are possible, consistent with embodiments of the invention. The components of Fig. 1 may be implemented through hardware, software, and/or firmware. System 100 may include clients 102a-102n, registrars 104a-104n, registry 106, detection service 108, and network 1 10.

[018] Clients 102a- 102n may send a request for a domain name registration to registrars 104a-104n. Registrars 104a-104n may check the availability of the requested domain name and send this information to clients 102a-102n. Registrars 104a-104n may check this information based on their records, and registrars 104a-104n may also send a request to registry 106 to determine the availability of the requested domain name. One of ordinary skill in the art would understand that clients 102a-102n may request the desired domain name from registry 106 without first requesting the domain name from registrars 104a-104n.

[019] If a requested domain name is available, clients 102a- 102n may register the domain name with registrars 104a-104n, and registrars 104a-104n may store information associated with the registered domain name. This information may include, for example, the date of registration of the domain name, the length of registration, the continuity of registration, and the number of times the domain name has changed ownership. One of ordinary skill in the art would understand that registry 106 may also store this information.

[020] Registrars 104a-104n may include one or more processors, such as computers. Registrars 104a-104n may each transmit registration information related to domain names to clients 102a-102n and registry 106. Registrars 104a-104n may also submit commands to registry 106 including create, update, transfer, renew, and delete to perform the desired operations. After receiving the commands from registrars 104a-104n, registry 106 may process the commands and store requested domain name information including, for example, the domain name, nameserver, and IP address in database 210.

[021] Detection service 108 may be located in registry 106 and may operate as part of registry 106. Detection service 108 may contain one or more databases that store one or more tables of data. Detection service 108 may be implemented using a combination of hardware, software, and/or firmware, and may be operable to receive and store data from various clients 102a-102n and registrars 104a-104n. For example, detection service 108 may search for and receive data from clients 102a-102n and registrars 104a-104n regarding website and domain name registration information.

[022] Detection service 108 may be operable to respond to requests for data. One of ordinary skill would appreciate that detection service 108 may be located separate from registry 106, and a user of registry 106 may query detection service 108 to request data. For example, a user may use registry 106 to enter a request for data stored at detection service 108. [023] Clients 102a-102n may provide users with an interface to network 1 10. By way of example, clients 102a-102n may be implemented using any device capable of accessing a data network, such as a general purpose computer or personal computer equipped with a modem or other network interface. Clients 102a-102n may also be implemented in other devices, such as a Blackberry™, Ergo Audrey™, mobile phones (with data access functions), Personal Digital Assistant ("PDA") with a network connection, IP telephony phone, or generally any device capable of communicating over a data network. Clients 102a-102n may be associated with one or more webservers that may host a website associated with a domain name. In addition, clients 102a- 102n may be associated with a conventional server that may, for example, host a website, perform nameserver transactions, perform domain name provisioning services, perform domain name resolution services, and communicate with other servers over network 1 10.

[024] Network 1 10 provides communications between or among the various entities depicted in system 100. Network 1 10 may be a shared, public, or private network, and may encompass a wide area or local area. Network 1 10 may be implemented through any suitable combination of wired and/or wireless communication networks (including Wi-Fi networks, GSM/GPRS networks, TDMA networks, CDMA networks, Bluetooth networks, or any other wireless networks). By way of example, network 1 10 may be implemented through a wide area network (WAN), local area network (LAN), an intranet, and/or the Internet. Further, the entities of system 100 may be connected to multiple networks 1 10, such as, for example, to a wireless carrier network, a private data network, and the public Internet.

[025] Fig. 2 is a diagram of an exemplary detection service 108 consistent with the present invention. Detection service 108 may include at least an index processor 202, communication server 204, web crawler 206, analysis module 208, and database 210. The number of components in detection service 108 is not limited to what is shown and other variations in the number of arrangements of components are possible, consistent with embodiments of the invention.

[026] Index processor 202 may be one or more known processing devices, such as, for example, a microprocessor from the Pentium family manufactured by Intel™ or a

mainframe-class processor. In an embodiment, index processor 202 may receive data from clients 102a-102n and registrars 104a-104n, process the received data, and may send the processed data to registry 106.

[027] Based on the received data, index processor 202 may derive attributes and characteristics about a website accessible through its domain name. For example, index processor 202 may derive information related to, for example, DNS traffic data, a total number of pages on the website, the content of the website, and a frequency of information update on the website. Index processor 202 may receive this information from clients 102a-102n and registrars 104a-104n.

[028] Communication server 204 may be a web server that provides functionality for receiving traffic over a network, such as the Internet. For example, communication server 204 may be a web server that a user may access at registry 106 using a web browser program, such as Safari, Internet Explorer, or Netscape Communicator. In an embodiment, communication server 204 is operable to receive data and requests for data, pass the requested data to the appropriate party, and provide other features.

[029] Web crawler 206 may access one or more web sites hosted by clients 102a-102n by crawling the corresponding domain names. A crawl by web crawler 206 may be initiated automatically when a user registers a domain name. Web crawler 206 may initiate a crawl by communicating a request for a specific resource using Hypertext Transfer Protocol (HTTP).

[030] In addition, a crawl may be initiated by detection service 108 at, for example, predetermined or user-defined times after registration of the domain name. After accessing the web site, web crawler 206 may receive the information contained on the web site and domain name registration information. The domain name registration information may include information related to the location of the domain name in main server records. For example, if client 102a registers a domain name, the location of the domain may correspond to the nameserver associated with client 102a.

[031] At the end of the registration period, if client 102a does not renew registration of the domain name, the domain name may expire, resulting in a change of the location of the domain name and/or other attributes of the domain name (i.e., it is no longer located at the nameserver associated with client 102a). Similarly, the location of the domain name may change if client 102a transfers the domain name to a different client (e.g., client 102n). In addition, if the domain name expires, the entity that registered the domain name for client 102a (e.g., registrar 104a) may decide to take over control of the domain name by moving the domain name to one of its servers.

[032] Web crawler 206 may initiate a crawl to determine the information related to any change to the domain name. Based on the results of the crawl, web crawler 206 may receive information indicating that the location of the domain name has changed from client 102a to, for example, client 102n or registrars 104a- 104n.

[033] Analysis module 208 may receive the information from index processor 204 and web crawler 206 and may organize the information. Analysis module 208 may organize the information by providing a date and time of the domain name registration and any changes in the main server records for the domain name. Analysis module 208 may store this information is database 210. One of ordinary skill in the art would appreciate that the information from index processor 204 and web crawler 206 may be stored in database 210 without being processed by analysis module 208.

[034] Fig. 3 illustrates an exemplary registry 106 that can be used to implement embodiments of the invention. The components and arrangement, however, are not critical to the invention. One of ordinary skill will recognize that embodiments of the invention may be implemented by computers or workstations organized as shown, organized in a distributed processing system architecture, or organized in myriad suitable combinations of software, hardware, and/or firmware.

[035] For example, registry 106 may include components such as a central processing unit (CPU) 310, a memory 320, an input/output (I/O) device(s) 330, an application programming interface (API) 340, and a database 350 that can be implemented in various ways. For example, an integrated platform (such as a workstation, personal computer, laptop, etc.) may comprise CPU 310, memory 320, I/O devices 330, API 340, and database 350, interconnected by a local bus 335. In such a configuration, components 310, 320, 330, 340, and 350 may connect through a local bus interface.

[036] CPU 310 may be one or more known processing devices, such as a

microprocessor from the Pentium family manufactured by Intel™ or a mainframe-class processor. Memory 320 may be one or more storage devices configured to store information used by CPU 310 to perform certain functions, operations, and steps related to embodiments of the present invention. Memory 320 may be a magnetic, semiconductor, tape, optical, or other type of storage device. In one embodiment, memory 320 includes one or more software application programs 325 that, when executed by CPU 310, perform various processes consistent with the present invention.

[037] Methods, systems, and articles of manufacture consistent with the present invention are not limited to programs configured to perform dedicated tasks. For example, memory 320 may be configured with a program 325 that performs several functions consistent with the invention when executed by CPU 310. Alternatively, CPU 310 may execute one or more programs located remotely from registry 106. For example, registry 106 may access one or more remote programs that, when executed, perform functions related to embodiments of the present invention. The configuration and number of programs implementing processes consistent with the invention are not critical to the invention. [038] Memory 320 may be also be configured with an operating system (not shown) that performs several functions well known in the art when executed by CPU 310. By way of example, the operating system may be Microsoft Windows™, Unix™, Linux™, an Apple™ operating system such as MAC OSX™, Personal Digital Assistant operating system such as Microsoft CE™, or other operating system. The choice of operating system, and even the use of an operating system, is not critical to the invention.

[039] I/O device(s) 330 may comprise one or more input/output devices that allow data to be received and/or transmitted by registry 106. For example, I/O device 330 may include one or more input devices, such as a network connection, keyboard, touch screen, mouse, microphone, disk reader, and the like, that enable data to be input or received from a user.

Further, I/O device 330 may include one or more output devices, such as a network connection, display screen, printer, speaker devices, and the like, that enable data to be output or presented to a user. The configuration and number of input and/or output devices incorporated in I/O device 330 are not critical to the invention.

[040] API 340 is an interface used by registry 106 to execute user requests. API 340 may be used in conjunction with I/O device 330 to define, for example, monitoring parameters, events, and notifications with respect to domain name registration and website information. In addition, API 340 may query and receive information regarding domain name registration and website information in response to information received at I/O device 330. API 340 may also update information stored in database 350.

[041 ] Database 350 may comprise one or more databases that store information and are accessed and managed through system 100. By way of example, database 350 may be an Oracle™ database, a Sybase™ database, or other relational database. As illustrated in Fig. 2, database 210 may located within registry 106. However, the information stored in database 210 may also be located in database 350.

Flowchart

[042] Fig. 4 illustrates a flowchart 400 of an exemplary method for detecting the stockpiling of domain names, consistent with the principles of the present invention. Although the steps of the flowchart are described in a particular order, one skilled in the art will appreciate that these steps may be performed in a modified or different order, or that certain steps may be omitted or other steps added. Further, one or more of the steps in Fig. 4 may be performed concurrently or in parallel.

[043] Registry 106 may receive information from one or more clients 102a-102n and registrars 104a-104n (step 410). The information received by registry 106 may include, for example, the date of registration of the domain name, the length of registration, the website information corresponding to the domain name. This information may also be received based on crawling the domain names of clients 102a-102n and registrars 104a-104n using web crawler 206. For example, detection service 108 may provide instructions to web crawler 206 to crawl websites associated with domain names at, for example, predetermined or user-defined times after registration of the domain name (step 420). After accessing the website, web crawler 206 may receive the information contained on the website and domain name registration information (step 430).

[044] After web crawler 206 receives that information, this information may be stored the data in database 210 (step 440). This information may also be stored in database 350 of registry 106. If any changes occur in the information contained in the websites, web crawler 206 may detect this change by receiving the new information during one or more subsequent crawls of the website. The different types of information contained on the website may be received and stored in database 210 along with a date and time stamp that indicates when the information was received.

[045] In addition to receiving website information, web crawler 206 may also crawl and receive information related to changes (if any) in the main server records associated with the domain name and corresponding website. As stated above, a user of a domain name may register the domain name for a period of time (e.g., one year). At the expiration of the one year registration period, the user may renew registration or let the registration expire. If the user renews registration of the domain name, no change in the associated web server may occur, and the user maintains registration.

[046] However, the registration of a domain name may change. For example, a registered user of a domain name may sell the domain name to a different user. If this occurs, a change in the ownership of the domain name may occur, and the subsequent user that purchases the domain name may operate the website. Based on this transition in ownership, the domain name of the website may no longer be hosted by first user's web server. Instead, the purchasing user may host the domain name on its web server, and this may result in a change in the associated web server. Therefore, when web crawler 206 crawls the website, web crawler 206 may receive the information regarding the change in the web server corresponding to the website and domain name. Accordingly, web crawler 206 may receive information related to any changes in the content of the website in addition to any changes in the server records

corresponding to the website. [047] In addition to crawling websites at predetermined or user-defined times, web crawler 206 may also crawl websites based on the registration status of the website. For example, web crawler 206 may crawl a website at a first time, Tl , while the website is registered to a user. As stated above, web crawler 206 may receive the information contained on the website and the web server information corresponding to the registered user of the website.

[048] At a second time, T2, upon expiration of the website (e.g., at the end of the one year registration period), the user may be provided with a grace period of time that provides the user with additional time to determine if it wants to renew registration of the website and domain name. For example, the grace period may be 45 days. However, one of ordinary skill in the art would appreciate that any grace period of time may be used. During the grace period, web crawler 206 may crawl the website and receive the information contained on the website and send this information to database 210 for storage. As stated above, a time and date stamp may also be stored with this information in database 210. In addition to receiving the website information, web crawler 206 may also receive web server information corresponding to the registered user of the website, and this information may also be stored with an associated time and date stamp (step 450).

[049] At a third time, T3, upon expiration of the grace period, web crawler 206 may initiate another crawl of the website and receive the information contained on the website and send this information to database 210 for storage. As stated above, a time and date stamp may also be stored with this information in database 210. In addition to receiving the website information, web crawler 206 may also receive web server information corresponding to the registered user of the website, and this information may also be stored with an associated time and date stamp.

[050] At this time, if the registered user does not renew registration of the domain name, registrars 104a-104n may take control of the expired domain name by keeping the domain name active. If registrars 104a-104n keep the domain name, it may host the domain name on one of its servers and may collect any ad revenue that may be generated from the domain name. By keeping the domain name, registrars 104a-104n may be viewed as "parking" the domain name. Registrars 104a-104n may "park" a domain name, thereby keeping the domain name and preventing it from entering the public domain, if it believes that the domain name may be valuable to the same user or another user at a later time. Alternatively, registrars 104a-104n may allow the domain name to expire, thereby putting the domain name back into the public domain for others to register at a later time. [051 ] As stated above, web crawler 206 may traverse various websites over a predetermined period of time and may compare the information on a given website at different points in time. For example, web crawler 206 may visit a particular website on day 1. The domain for this website may expire on day 10, and may then enter the 45-day grace period for renewal. Web crawler 206 may visit the website again on day 20, which is within the grace period. Similarly, web crawler 206 may visit the website on day 60, which is after the end of the grace period.

[052] By visiting the website prior to expiration, during the grace period after expiration, and post-expiration, web crawler 206 may copy the information located on the website during each visit, and may compare the information received at different points in time to analyze any changes in the information. Web crawler 206 may determine whether any such changes in information available on the website are indicative of the domain name associated with the website being "parked" by a registrar (step 460).

[053] In addition, web crawler 206 may determine which servers host the website domain and may determine any changes in the servers used for hosting. For example, if a domain name expires, the domain name may be hosted by servers owned or operated by the registrar rather than by a service provider that previously hosted the domain name before its registration expired. Determining whether a domain name is being hosted by a different server may also be determined by examining changes in DNS records associated with the domain name, such as changes in IP addresses associated with the domain name. By detecting hosting or IP address changes associated with the domain name, web crawler 206 may determine if the registrar with which the domain name was originally registered has taken ownership of the domain name and begun "parking" it or whether the domain name has entered the public domain.

[054] While certain features and embodiments of the invention have been described, other embodiments of the invention will be apparent to those skilled in the art from consideration of the specification and practice of the embodiments of the invention disclosed herein.

Furthermore, although aspects of embodiments of the present invention have been described as being associated with data stored in memory and other storage mediums, one skilled in the art will appreciate that these aspects can also be stored on or read from other types of tangible, non- transitory computer-readable media, such as secondary storage devices, like hard disks, floppy disks, or a CD-ROM, or other forms of RAM or ROM. Further, the steps of the disclosed methods may be modified in various ways, including by reordering steps and/or inserting or deleting steps, without departing from the principles of the invention. [055] It is intended, therefore, that the specification and examples be considered as exemplary only, with a true scope and spirit of the invention being indicated by the following claims and their full scope of equivalents.

Claims

WHAT IS CLAIMED IS:

1. A computer-implemented method for detecting a status of a domain name, the method comprising the steps, performed by a computer, of:

receiving information related to the domain name from a registrar;

crawling the at least one domain name, wherein the crawling receives first information located on a website associated with the domain name and receives second information related to a registration of the domain name; and

storing the first information and the second information,

wherein the crawling is initiated at a first time prior to expiration of the at least one domain name and a second time after expiration of the at least one domain name.

2. The method of claim 1 , wherein the second time is during a grace period.

3. The method of claim 1 , wherein the second time is after the expiration of a grace period.

4. The method of claim 1 , further comprising:

crawling the at least one domain name at the second time during a grace period; and crawling the at least one domain name at a third time after expiration of the grace period.

5. The method of claim 1, wherein the stored first information and second information are compared after each crawl.

6. The method of claim 1, further comprising:

comparing at least one of the first information and second information after each crawl; and

determining a change in at least one of the first information and the second information.

7. The method of claim 6, further comprising:

determining, based on the change, a web server that hosts the domain name.

8. A computer-readable medium containing instructions which when executed on a processor performs a method for detecting a status of a domain name, the method comprising: receiving information related to the domain name from a registrar;

storing the first information and the second information,

9. The computer-readable medium of claim 8, wherein the second time is after the expiration of a grace period.

10. The computer-readable medium of claim 8, wherein the second time is after the expiration of a grace period.

1 1. The computer-readable medium of claim 8, further comprising;

12. The computer-readable medium of claim 8, wherein the stored first information and second information are compared after each crawl.

13. The computer-readable medium of claim 8, further comprising:

14. The computer-readable medium of claim 13, further comprising:

determining, based on the change, a web server that hosts the domain name.

15. A computer system for detecting a status of a domain name, including a computer having memory and a processor, comprising

one or more systems that include data; and

a detection service in communication with the one or more systems, wherein the detection service:

receives information related to the domain name from a registrar; crawls the at least one domain name, wherein the crawling receives first

information located on a website associated with the domain name and receives second information related to a registration of the domain name; and

stores the first information and the second information,

16. The system of claim 15, wherein the second time is during a grace period.

17. The system of claim 15, wherein the second time is after the expiration of a grace period.

18. The system of claim 15, wherein the detection service:

crawls the at least one domain name at the second time during a grace period; and crawls the at least one domain name at a third time after expiration of the grace period.

19. The system of claim 15, wherein the stored first information and second information are compared after each crawl.

20. The system of claim 15, wherein the detection service:

compares at least one of the first information and second information after each crawl; determines a change in at least one of the first information and the second information; and

determines, based on the change, a web server that hosts the domain name.