Abstract: Identifier resolution system is the foundation for the stable operation and development of Internet. The privacy protection and data security issues of identifier resolution system draw significantly more attention. Technologies including DNSSEC based on digital signature and DoT based on encryption technology can solve the security problem partially, but cannot realize the user privacy protection of the whole process of identifier resolution. Based on the current status of technology research, a new identifier resolution trust model based on encryption transmission is proposed, and a trust chain is established to realize the trust transfer of each node in the identifier resolution system, and through the whole process of encryption communication, the user privacy and data security during identifier parsing are protected. Firstly, the research status of security technology in domain name area is introduced, then the whole structure, trust chain model and work flow of the proposed model are described, finally by five group experiments, the delay, performance and security of the model under different encryption methods and transfer protocols are tested and analyzed, and the feasibility of the model is verified by combining with the test results of live DNS.

Key words: identifier resolution system, encryption transmission, trust chain, privacy protection