Blockchain controlled cross-domain data transfer

A method comprising:

• receiving a data file with off-chain content that originated in a first security domain of a multi-domain blockchain network;
• verifying that on-chain and off-chain content satisfies a cross-domain security policy between the first security domain and a second security domain within the multi-domain blockchain network with a different security policy than the first security domain;
• in response to verifying the off-chain content, signing an on-chain portion of the data file with a signature of a cross-domain endorsement peer;
• transmitting the signed on-chain portion of the data file to an ordering service of the multi-domain blockchain network;
• and
• transmitting the off-chain content of the data file to a first security domain cross-domain content controller.

A non-transitory computer-readable medium comprising instructions, that when read by a processor, cause the processor to perform a method comprising:

• receiving a data file with off-chain content that originated in a first security domain of a multi-domain blockchain network;
• verifying that an on-chain portion of the data file and the off-chain content satisfies a cross-domain security policy between the first security domain and a second security domain within the multi-domain blockchain network with a different security policy than the first security domain;
• in response to verifying the on-chain and off-chain content, signing the on-chain portion of the data file with a signature of a cross-domain endorsement peer;
• transmitting the signed on-chain portion of the data file to an ordering service of the multi-domain blockchain network;
• and
• transmitting the off-chain content of the data file to a first-security domain cross-domain content controller to hold.