Worst-case design in mission-critical communications
In mission-critical environments, communications availability cannot depend on the integrity of terrestrial infrastructure. Fibre-optic networks, switching nodes and terrestrial microwave links share a common structural vulnerability: their exposure to cascading physical failures caused by natural disasters, deliberate interference or traffic saturation in emergency situations. The design of communications systems for these environments starts from a strict engineering premise: the system must maintain its operational parameters under the hypothesis that the primary terrestrial network has failed in its entirety. Redundancy in this context is not limited to duplicating equipment. It requires route diversity in the strict sense, meaning that each backup link must follow a physical and technological path independent of the primary link. The combination of geostationary satellite links, medium or low earth orbit constellations, and HAPS platforms makes it possible to build architectures with genuine route separation, eliminating common failure modes. Each segment of the chain — user terminal, space segment, ground control station and distribution network — must be evaluated independently with respect to its probability of failure and its recovery time. The latency and bandwidth available on each alternative route directly condition the design of switching protocols. In command and control applications, switching between routes must occur within predefined time thresholds without operator intervention, which requires degradation detection mechanisms and automatic activation validated under adverse operational conditions. Traffic prioritisation in contingency situations — encrypted voice, status telemetry, coordination data — must be defined at the network management layer before the failure occurs, not as a reactive response to it. From the European regulatory perspective, service continuity requirements for critical infrastructures are being progressively incorporated into sectoral regulatory frameworks, which transfers the burden of demonstrating resilience to the network operator. This means that architecture decisions taken at the design stage have direct consequences for the capacity to achieve regulatory compliance during operation. The selection of technologies, the definition of service level agreements between segments and the documentation of switching procedures form part of the technical file that competent authorities may require. Worst-case design ceases to be an optional engineering practice and becomes an operational requirement.
NASSAT - Network Satellite Systems