German techies invent hacker killer

The Lock-Keeper-System from the Trier Institute for Telematics operates by physically separating local and wide area networks when under attack.

The core idea of the process, which has now been patented, works by adopting a similar method to locks on canals for boat traffic. All data traffic reaches the inside of the so-called 'Lock-Keeper' through a single computer. If the inner lock door is closed, infected data packages can be identified before they reach the internal network, and can then be rendered harmless. Only once the connection is broken off from outside can a relay then re-open the internal LAN connection.

Thomas Engel from the Institute of Telematics, said: "With this, access from the outside is one hundred percent prevented."

He added: "Three PCs and a special circuit board is all that is needed. Hackers with insider information can still slip through the mesh of the network of a firewall. You cannot even outwit the Lock-Keeper with the root password."

Also, a firewall is only as good as the employee who operates it, according to Engel. In contrast, the Lock-Keeper works on its own.

However, the high level of security is paid for with a delay in the data stream. However, Engel claims that the greatest problems come from viruses and worms which are brought in to networks by email, and he says, a delay of around 30 seconds is not crucial for mail users.

The system is currently in use in two small banks in Luxembourg with around 50 and 150 employees. However, larger companies in Germany have already expressed interest in the system.

By Christian M. Wagner