# US 2025/0097196 A1 · Systems and methods of implementing cross domain solutions

> Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt

- Number: US 2025/0097196 A1
- Document ID: US20250097196A1
- Status: Published application
- Kind: A1
- Application number: 18/467,667
- Filed: 2023-09-14
- Published: 2025-03-20
- Earliest claimed: 2023-09-14
- Assignees: Skyward Federal LLC
- Applicants: Skyward Federal LLC
- Inventors: Matthew PETERS; Cameron REESE; Erick HAMANN
- Web page: https://patentgrep.com/patent/US20250097196A1

## CPC

- H04L 63/0209: {Architectural arrangements, e.g. perimeter networks or demilitarized zones}
- H04L 63/102: {Entity profiles}
- H04L 63/145: {the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms}
- H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M)

## Abstract

A system is provided that allows for determining which one of multiple possible cross domain solutions (CDSs) is to be used to carry out a request to transfer a payload from one domain (e.g., a low-side security domain) to another domain (e.g., a high-side security domain).

## Claims

### Claim 1

A system that interfaces with a plurality of cross domain solutions (CDS), the system comprising:
a processing system that is provided within a first security domain, the processing system comprising instructions stored to non-transitory memory, the instructions configured to cause at least one hardware processor of the first processing system to perform operations comprising:
receiving a request to transfer a payload from the first security domain to a second security domain;
extracting metadata based on the payload;
automatically selecting, based at least in part on the extracted metadata, a first CDS, out of a plurality of CDSs, to carry out the transfer of the payload from the first security domain to the second security domain;
based on which one of the plurality of CDSs was selected as the first CDS, performing one or more preprocessing operations on the payload; and
based at least in part on the performed one or more preprocessing operations, instructing the first CDS to transfer the payload to the second security domain.

### Claim 2 (depends on 1)

The system of claim 1, wherein the operations further comprise:
generating, based on the extracted metadata, an ordered list that identifies multiple different CDSs, wherein the first CDS is selected from the generated order list and is the CDS, of the multiple different CDS, that is highest in priority within the order list.

### Claim 3 (depends on 2)

The system of claim 2, wherein the operations further comprise:
determining that the first CDS has failed to transfer the payload to the second security domain; and
based on determination that the first CDS has failed to transfer the payload, automatically selecting, for the ordered list, a second CDS that is different from the first CDS; and
attempting to transfer the payload using the second CDS.

### Claim 4 (depends on 3)

The system of claim 3, wherein results of at least one preprocessing operation performed for the first CDS are used for the attempted transfer of the payload using the second CDS.

### Claim 5 (depends on 2)

The system of claim 2, wherein an attempt with each of the CDSs in the generated list is made until transfer of the payload is successful.

### Claim 6 (depends on 2)

The system of claim 2, wherein the ordered list is additionally based on which CDSs of the plurality of CDSs a requestor is authorized to use.

### Claim 7 (depends on 1)

The system of claim 1, wherein the operations further comprise:
monitoring for a result state of the transfer of the payload by the first CDS.

### Claim 8 (depends on 1)

The system of claim 1, wherein the operations further comprise:
prompting an approver to approve the request to transfer the payload to the second security domain, wherein the instruction to the first CDS is additionally conditioned on approval of the request by the approver.

### Claim 9 (depends on 1)

The system of claim 1, wherein the operations further comprise:
generating and signing a manifest that includes results of antivirus and/or malware scanning.

### Claim 10 (depends on 9)

The system of claim 9, wherein the instruction to the first CDS to transfer the payload is additionally conditioned upon the manifest.

### Claim 11 (depends on 9)

The system of claim 9, wherein the instruction to the first CDS to transfer the payload occurs prior to generation and signing of the manifest that includes results of antivirus and/or malware scanning.

### Claim 12 (depends on 1)

The system of claim 1, further comprising:
a second processing system that is provided within the second security domain, the second processing system comprising instructions stored to non-transitory memory, the instructions configured to cause at least one hardware processor of the second processing system to perform operations comprising:
monitoring for reception of the payload; and
validating the payload by generating a hash of the payload that has been received and comparing the hash to a provided hash.

### Claim 13

A method implemented on a security domain that is configured to interface with a plurality of different cross domain solutions (CDS), the method comprising:
receiving a request to transfer a payload from the security domain to a second security domain;
extracting metadata based on the payload;
automatically selecting, based at least in part on the extracted metadata, a first CDS, out of a plurality of CDSs, to carry out the transfer of the payload from the security domain to the second security domain;
based on which one of the plurality of CDSs was selected as the first CDS, performing one or more preprocessing operations on the payload; and
based at least in part on the performed one or more preprocessing operations, instructing the first CDS to transfer the payload to the second security domain.

### Claim 14 (depends on 13)

The method of claim 13, further comprising:
generating, based on the extracted metadata, an ordered list that identifies multiple different CDSs, wherein the first CDS is selected from the generated order list and is the CDS, of the multiple different CDS, that is highest in priority within the order list.

### Claim 15 (depends on 14)

The method of claim 14, further comprising:
determining that the first CDS has failed to transfer the payload to the second security domain; and
based on determination that the first CDS has failed to transfer the payload, automatically selecting, for the ordered list, a second CDS that is different from the first CDS; and
attempting to transfer the payload using the second CDS.

### Claim 16 (depends on 15)

The method of claim 15, wherein results of at least one preprocessing operation performed for the first CDS are used for the attempted transfer of the payload using the second CDS.

### Claim 17 (depends on 13)

The method of claim 13, further comprising:
prompting an approver to approve the request to transfer the payload to the second security domain, wherein the instruction to the first CDS is additionally conditioned on approval of the request by the approver.

### Claim 18 (depends on 13)

The method of claim 13, further comprising:
generating and signing a manifest that includes results of antivirus and/or malware scanning.

### Claim 19 (depends on 18)

The method of claim 18, wherein the instruction to the first CDS to transfer the payload occurs prior to generation and signing of the manifest that includes results of antivirus and/or malware scanning.

### Claim 20

A non-transitory computer readable storage medium storing computer executable instructions for use with at least one hardware processor of a processing system of a first security domain, the stored instructions comprising instructions configured to cause the at least one hardware processor to perform operations comprising:
receiving a request to transfer a payload from the security domain to a second security domain;
extracting metadata based on the payload;
automatically selecting, based at least in part on the extracted metadata, a first CDS, out of a plurality of CDSs, to carry out the transfer of the payload from the first security domain to the second security domain;
based on which one of the plurality of CDSs was selected as the first CDS, performing one or more preprocessing operations on the payload; and
based at least in part on the performed one or more preprocessing operations, instructing the first CDS to transfer the payload to the second security domain.