Lock-Keeper is a high-level security solution based on the idea of "Physical Separation". It is a hardware-based device and works like a sluice to provide secure data exchange between the physically separated networks. Based on the simple principle that “the ultimate method to secure a network is to disconnect it", the Lock-Keeper can entirely prevent session-based and protocol-based network attacks (i.e. so-called "online attack") by physically isolating the sensitive network from outside intruders.
Lock-Keeper is not proposed to replace the functionality of the conventional firewall but is generally used in combination with firewall to enhance the security of the protected network. Moreover, other content scanning mechanisms, e.g. anti-virus software, can also be flexibly integrated with Lock-Keeper to prevent some application-level attacks, also referred to as "offline attacks".
The strengths of the Lock-Keeper solution can be summarized as:
Lock-Keeper can meet the security needs in different scenarios, such as most public authorities, national defence institutions or companies with a highly sensitive IT infrastructure, etc.
A research group led by Prof. Dr. Christoph Meinel at Hasso Plattner Institute(HPI) is now doing R&D works on Lock-Keeper: