Key encryption system, method, and network devices

A method of controlling access to a first plurality of functions of at least one encryption device and access to a second plurality functions of at least one transport device, the method comprising:

• providing a customer with access to at least some of the first plurality of functions;
• providing the customer with access to a subset of the second plurality of functions, the subset of the second plurality of functions comprising at least one of the second plurality of functions;
• and,
• providing a network service provider with access to at least some of the second plurality of functions.

A network device for controlling access to a first plurality of functions of at least one encryption device and access to a second plurality functions of at least one transport device, the network device comprising:

• an encryption management unit for, responsive to receiving first requests from the users of a customer, providing first instructions intended for the at least one encryption device for controlling access to at least some functions of the first plurality of functions and, responsive to receiving second requests from users of a network service provider, providing second instructions intended for the at least one encryption device for controlling access a subset of the first plurality of functions, the subset comprising at least one of the first plurality of functions;
• and,
• a transport management unit for, responsive to receiving third requests from the users of the network service provider, providing third instructions intended for the at least one transport device for controlling access to at least some functions of the second plurality of functions;
• and,
• a communications interface for receiving the first requests, the second requests, and the third requests and for transmitting the first instructions, the second instruction, and the third instructions.

A network device for controlling access to a first plurality of functions of at least one encryption device and access to a second plurality functions of at least one transport device, the network device comprising:

• an encryption management unit for, responsive to receiving first requests from users of a customer, providing first instructions intended for the at least one encryption device for controlling access to at least some functions of the first plurality of functions;
• and,
• a transport management unit for, responsive to receiving second requests from users of a network service provider, providing second instructions intended for the at least one transport device for controlling access to at least some of the second plurality of functions and, responsive to receiving third requests from the users of the customer, providing third instructions intended for the at least one transport device for controlling access a subset of the second plurality of functions, the subset comprising at least one of the second plurality of functions;
• and,
• a communications interface for receiving the first requests, the second requests, and the third requests and for transmitting the first instructions, the second instruction, and the third instructions.

A method of providing fault detection comprising:

• detecting faults;
• and,
• for each fault:
• determining a port at which the fault occurred;
• and,
• identifying a connection associated with the port.

A system comprising:

• a database comprising:
• first instructions for controlling at least one encryption device, the at least one encryption device being managed by an EMU (Encryption Management Unit);
• and,
• second instructions for controlling at least one transport device, the at least one transport device being managed by a TMU (Transport Management Unit);
• and,
• an SCU (Security Core Unit) for servicing the first instructions and the second instructions by providing the EMU and TMU with the first instructions and the second instructions, respectively.

An article of manufacture comprising:

• a computer usable medium having computer readable program code means embodied therein for controlling access to a first plurality of functions of at least one encryption device and access to a second plurality functions of at least one transport device, the computer readable code means in said article of manufacture comprising:
• computer readable code means for providing a customer with access to at least some of the first plurality of functions;
• computer readable code means for providing a network service provider with restricted access to a subset of the first plurality of functions, the subset of the first plurality of functions comprising at least one of the first plurality of functions;
• and,
• computer readable code means for providing the network service provider with access to at least some of the second plurality of functions.