Secure network and method of establishing communication amongst network devices that have restricted network connectivity

A secure network configured to transmit data, comprising:

• a first and a second anti-bubble, each anti-bubble having a distinct network security policy and a plurality of anti-bubble partitions, each anti-bubble partition having a plurality of network devices configured to transmit and receive data;
• and
• a plurality of network control points, each network control point having one or more network control point devices, each network control point device having at least one interface, wherein each anti-bubble partition is connected to at least one and no more than two network control points to provide a connection between a network device in the first anti-bubble and a network device in the second anti-bubble, and wherein each one of the network control point devices is configured to enforce the network security policy of at least one of the anti-bubbles and wherein each network control point enforces source integrity for all of the plurality of anti-bubble partitions that are connected to it.

A secure network configured to carry data, comprising:

• a plurality of anti-bubbles, each anti-bubble having a plurality of anti-bubble partitions, each anti-bubble partition having at least one network device configured to transmit and receive data, and wherein no data can be transmitted between two devices in different anti-bubble partitions of the same anti-bubble and all of the network devices corresponding to at least one of the plurality of anti-bubbles having the same network security policy;
• and
• a plurality of network control points, each network control point including one or more network control point devices having at least one interface, wherein each anti-bubble partition is connected to only one network control point, which is used to provide a connection between any two network devices of different anti-bubbles, and wherein each one of the network control point devices is configured to enforce the network security policy of the anti-bubble that the network control point device is connected to and wherein when data is transmitted from one network device to another network device, two network control points are traversed.