A system for enabling secured data storage and data utilization, said system comprising: (a) a server computer, said server computer including: (i) a network vault, such that said network vault is installed on said server computer, for providing secure access to data, and (ii) server software configured to provide and protect a single data access channel to network vault, said server software including: a network interface for receiving packets from a network and for sending packets to said network; a packet filter for forming said single data access channel in combination with said network interface, said packet filter filtering said packets received from said network according to a destination address, such that if said packets do not feature said destination address, said packets are dropped; an encryption software module for decrypting said packets allowed by said packet filter or alternatively for encrypting said data received from said network vault; (b) a hardware storage device for storing data, wherein said hardware storage device is accessible only by said server computer; (c) said network for connecting at least one user to said network vault; and (d) client software for communicating with said network vault through said single data access channel, said client software operating on at least one user computer, said at least one user computer operable to connect to said network; wherein only said server software and said network vault are permitted to be operated by said server computer, such that any other software program is inoperable by said server computer; wherein said network vault is configured to provide access to said data only if said at least one user is permitted access according to an authorization list, said access being provided via said single data access channel and said server software. (a) a server computer, said server computer including: (i) a network vault, such that said network vault is installed on said server computer, for providing secure access to data, and (ii) server software configured to provide and protect a single data access channel to network vault, said server software including: a network interface for receiving packets from a network and for sending packets to said network; a packet filter for forming said single data access channel in combination with said network interface, said packet filter filtering said packets received from said network according to a destination address, such that if said packets do not feature said destination address, said packets are dropped; an encryption software module for decrypting said packets allowed by said packet filter or alternatively for encrypting said data received from said network vault; (i) a network vault, such that said network vault is installed on said server computer, for providing secure access to data, and (ii) server software configured to provide and protect a single data access channel to network vault, said server software including: a network interface for receiving packets from a network and for sending packets to said network; a packet filter for forming said single data access channel in combination with said network interface, said packet filter filtering said packets received from said network according to a destination address, such that if said packets do not feature said destination address, said packets are dropped; an encryption software module for decrypting said packets allowed by said packet filter or alternatively for encrypting said data received from said network vault; a network interface for receiving packets from a network and for sending packets to said network; a packet filter for forming said single data access channel in combination with said network interface, said packet filter filtering said packets received from said network according to a destination address, such that if said packets do not feature said destination address, said packets are dropped; an encryption software module for decrypting said packets allowed by said packet filter or alternatively for encrypting said data received from said network vault; (b) a hardware storage device for storing data, wherein said hardware storage device is accessible only by said server computer; (c) said network for connecting at least one user to said network vault; and (d) client software for communicating with said network vault through said single data access channel, said client software operating on at least one user computer, said at least one user computer operable to connect to said network; wherein only said server software and said network vault are permitted to be operated by said server computer, such that any other software program is inoperable by said server computer; wherein said network vault is configured to provide access to said data only if said at least one user is permitted access according to an authorization list, said access being provided via said single data access channel and said server software. wherein only said server software and said network vault are permitted to be operated by said server computer, such that any other software program is inoperable by said server computer; wherein said network vault is configured to provide access to said data only if said at least one user is permitted access according to an authorization list, said access being provided via said single data access channel and said server software.