Abstract: A method of conducting secure operations on an uncontrolled network in which authorized users are provided with a personal identifier and with a portable, electronically readable card with part of a system key thereon. The system key is created by a secure network access port (SNAP) at the workstation, and, when used in combination with the persona identifier, uniquely identifies the user so that the card and identifier may be used to conduct secure operations from any workstation in the network. Operational keys for conducting the secure operations are provided from a network security manager to a workstation in response to a validated request for access. The operational keys are provided in an encrypted communication using an initialization key unique to the workstation and known to the manager.