Black core network system and method

摘要

In a network having an encryptor device having an encryption module, a plaintext interface and a ciphertext interface, wherein the encryption module encrypts data transferred from the plaintext interface to a black network through the ciphertext interface and decrypts data transferred from the ciphertext interface to a plaintext network through the plaintext interface, wherein the plaintext interface can be connected through the plaintext link to a plaintext network and wherein the ciphertext interface can be connected through a ciphertext link to a black network, a system and method for reflecting a link failure. A link failure is detected at the ciphertext interface and the link failure is reflected to the plaintext interface.

主权项

1. An encryptor device for sending network communications between a plaintext network and a ciphertext network, the encryptor device comprising:
a plaintext interface in communication with a plaintext network, the plaintext interface configured to receive a plaintext network communication packet from the plaintext network; a ciphertext interface in communication with a ciphertext network, the ciphertext interface configured to send an encrypted network communication packet to the ciphertext network; an encryption module in communication with the plaintext interface and the ciphtertext interface, the encryption module configured to encrypt the received plaintext network communication packet to obtain the encrypted network communication packet; and a link failure handler in communication with the plaintext interface and the ciphertext interface, the link failure handler configured to: detect a failure in a first communication link established between the ciphertext interface and the ciphertext network; in response to the detected failure, disable a second communication link established between the plaintext interface and the plaintext network, the second communication link being a different communication link than the first communication link; and set a flag in a plaintext topology table of the encryptor device, wherein: the plaintext topology table lists a plurality of plaintext network communication routes for the encryptor device; and the flag set in the plaintext topology table overrides at least one network communication route selected from the plurality of network communication routes.