Abstract: A validation device in a communication network is configured to communicate control information bidirectionally via a control plane of the network and access message data via a production plane of the network. The validation device receives key data via the control plane, and accesses a message received via the production plane by a message receiving device. The message includes a signature derived from the first key data. The validation device uses the first key data to check validity of the signature.

Abstract: A validation device in a communication network is configured to communicate control information bidirectionally via a control plane of the network and access message data via a production plane of the network. The validation device receives key data via the control plane, and accesses a message received via the production plane by a message receiving device. The message includes a signature derived from the first key data. The validation device uses the first key data to check validity of the signature.

Abstract: A data validation system in a communication network has a bidirectional control plane and an independent message production plane. A sending device and a validation device communicate via the control plane and the production plane. A signer device and a validation device access message data from the sending device via the production plane. A computer-based network key manager conveys key data to the signer device and validation device via the control plane. The signer device accesses a message from the message sending device, produces a signature, and attaches the signature to the message. The validation device accesses the message received at the receiving device and uses the key data to validate the signature.

Abstract: A data validation system in a communication network has a bidirectional control plane and an independent message production plane. A sending device and a validation device communicate via the control plane and the production plane. A signer device and a validation device access message data from the sending device via the production plane. A computer-based network key manager conveys key data to the signer device and validation device via the control plane. The signer device accesses a message from the message sending device, produces a signature, and attaches the signature to the message. The validation device accesses the message received at the receiving device and uses the key data to validate the signature.

Abstract: A computer-based method includes transmitting a packet from a source across a packet-switched network that includes multiple network switches, and attaching, or otherwise associating, a unique signature to the packet at one or more of the network switches. Each unique signature identifies a corresponding one of the network switches, through which the packet passes as it travels from the source toward a destination. The packet and an attached, or otherwise associated, string of signatures from the plurality of network switches, is received at or near the destination in the packet-switched network. In a typical implementation, the validity of the packet is checked, by a validator (e.g., at or near the destination).

Abstract: A computer-based method includes transmitting a packet from a source across a packet-switched network that includes multiple network switches, and attaching, or otherwise associating, a unique signature to the packet at one or more of the network switches. Each unique signature identifies a corresponding one of the network switches, through which the packet passes as it travels from the source toward a destination. The packet and an attached, or otherwise associated, string of signatures from the plurality of network switches, is received at or near the destination in the packet-switched network. In a typical implementation, the validity of the packet is checked, by a validator (e.g., at or near the destination).