NetLOCK is installed at the IP layer of the network stack, where it operates transparently to the user and applications. As a result of a combination of technologies, network communications data arrive only at the chosen destination, confidentially and without alteration. NetLOCK provides encryption, but also uses other technologies, such as authentication, access control and integrity checking, to place obstacles between sensitive information and would-be snoopers. We believe this results in the highest possible level of assurance. When two workstations initiate private communications, NetLOCK automatically generates a public key, which the workstations share to encrypt and decrypt data.
Keys are valid for a specific time period, set by the security administrator.
After traffic key negotiation, the workstations automatically authenticate themselves to one another by exchanging digitally signed certificates of authentication. Data transfer occurs only when these procedures are completed successfully. Then as the data is transmitted, NetLOCK inspects the data for alterations by performing security checks, such as integrity checksums. NetLOCK will notify the administrator if a security breach occurs. The entire process takes a matter of seconds and does not impact system performance.