Domain Name System (DNS) is a widely used infrastructure for remote control and batch management of IoT devices. As a critical Internet infrastructure, DNS is structured as a tree-like hierarchy with single root zone authority at the top, which puts the operation of DNS at risk from single point of failure. The current root zone management is lack of transparency and accountability, since only the root zone file is published as the final outcome of operations inside the root zone authority. Towards distributed root zone operation in DNS, this paper presents a blockchain-based root operation architecture—RootChain, composed of multiple root servers. On the basis of maintaining the single root authority for top-level domain (TLD), RootChain decentralizes TLD data publication by empowering delegated TLD authorities to publish authenticated data directly. The transparency and accountability of root zone operation are attained by smart-contracting the whole life cycle of TLD operation and logging all operations on the chain. RootChain is transparent to recursive/stub resolver and DNS/DNSSEC-compatible. A proof-of-concept prototype of RootChain has been implemented with Hyperledger Fabric and evaluated by experiments.

中文翻译：

---

物联网的基于区块链的DNS根域管理分散

域名系统（DNS）是广泛用于IoT设备的远程控制和批量管理的基础架构。作为关键的Internet基础结构，DNS被构造为树状层次结构，其顶部具有单个根区域权限，这使DNS的操作面临单点故障的风险。当前的根区域管理缺乏透明度和责任感，因为只有根区域文件被发布为根区域权限内操作的最终结果。针对DNS中的分布式根区域操作，本文提出了一种基于区块链的根操作体系结构-RootChain，它由多个根服务器组成。在维护顶级域（TLD）的单一根权限的基础上，RootChain通过授权委派的TLD授权机构直接发布经过身份验证的数据来分散TLD数据的发布。通过智能地约定TLD操作的整个生命周期并记录链上的所有操作，可以实现根区域操作的透明性和问责制。RootChain对递归/存根解析器和DNS / DNSSEC兼容是透明的。已经使用Hyperledger Fabric实现了RootChain的概念验证原型，并通过实验对其进行了评估。