Abstract: A data validation system in a communication network has a bidirectional control plane and an independent message production plane. A sending device and a validation device communicate via the control plane and the production plane. A signer device and a validation device access message data from the sending device via the production plane. A computer-based network key manager conveys key data to the signer device and validation device via the control plane. The signer device accesses a message from the message sending device, produces a signature, and attaches the signature to the message. The validation device accesses the message received at the receiving device and uses the key data to validate the signature.