Lock-Keeper – Network Security
with Patented Data Sluice Technology

The amount of sensitive data and the size of IT infrastructures in government agencies and companies has risen dramatically in recent years. At the same time as data amounts and their sensitivity have increased the potential for attacks has grown significantly. Attack techniques are increasingly refined while conventional protection mechanisms such as firewalls show vulnerabilities.

The patented Lock-Keeper technology enables an unprecedented level of security when exchanging data between two networks. This is achieved through the complete physical separation of the networks, ensuring that there is absolutely no connection between them at any point in time. Based on the principle of physical separation of both networks the Lock-Keeper technology reliably prevents all onlinebased attacks such as spyware, backdoors, attacks on the protocol level such as TCP sequence number attacks, tunneling, message encapsulating, tiny fragment attacks or overlapping fragment attacks. Denial of service attacks are blocked in such a way that they do not affect the network to be protected. Unlike familiar protection mechanisms, the Lock-Keeper also defends proactively against any kind of attack based on a physical connection between networks, even those that are not yet known.

The Sluice Principle of Lock-Keeper
The best protection for networks is physical separation. The use of the patented sluice technology achieves an actual physical separation of both networks, without ever having any connection – not even for the briefest moment. The principle is as simple as it is effective: First the data is transferred into the Lock-Keeper, there is no connection to the internal network at this time. Then the «sluice» between the Lock-Keeper and the external network is closed, the data is kept separately within the Lock-Keeper system, only then is the data transferred to the internal network.