Semi-interactive one-way transfer of data to an isolated network

A system comprising:

• a first computing device in a public network, the first computing device including:
• a first processor;
• and
• a first computer-readable medium including instructions that, when executed by the first processor, cause the first processor to:
• obtain a stream of data packets from a first application executing on the first computing device;
• pass the stream of data packets to a first instance of a trust module executing on the first computing device;
• add, by the first instance of the trust module, metadata to the stream of data packets, the metadata including a digital signature including a private key specific to the first instance of the trust module and information relating to user information provided to the first instance of the trust module, the first application, a sending user, and a recipient user;
• and
• forward the stream of data packets to a second computing device in a private network via a cross-domain system (CDS) providing one-way communication of data from the public network to the private network.

A non-transitory computer-readable medium including stored thereon a sequence of instructions which, when executed by a processor causes the processor to execute a process, the process comprising:

• obtaining, by a first computing device in a public network, a stream of data packets from a first application executing on the first computing device;
• passing, by the first computing device, the stream of data packets to a first instance of a trust module executing on the first computing device;
• adding, by the first instance of the trust module executing on the first computing device, metadata to the stream of data packets;
• forwarding, by the first computing device, the stream of data packets to a second computing device in a private network via a cross-domain system (CDS) providing secure one-way communication of the stream of data packets from the public network to the private network, wherein a second computing device is configured to:
• process the metadata of the stream of data packets to verify an identity of a sending user and verify a digital signature relating to the first instance of the trust module in the metadata in the stream of data packets;
• and
• responsive to verifying the identity of the sending user and verifying the digital signature, receive the stream of data packets in a receive buffer maintained by the second computing device.