System and method for integrity assurance of partial data

A system for assuring the integrity of file segments being transferred from a first file repository in a first security domain to a client in a second separate security domain, comprising:

• a first server in the first security domain coupled to the first file repository for storing a plurality of files, the first server configured to transfer a segment of a particular stored file on an output upon request;
• a second server outside the first security domain and outside the second security domain, the second server having an input coupled to the output of the first server via a first dedicated communications link and an output, the second server coupled to a second file repository outside the first and second security domains, the second server configured to receive the segment of the particular stored file on the input, to store the received segment in the second file repository, to identify if there are additional segments of the particular stored file in the second file repository, to process the received segment of the particular stored file together with a predetermined number of identified additional segments of the particular stored file present in the second file repository to identify the presence of malware, and, only if no malware is found, to transfer the received segment of the particular stored file on an output as a scanned file segment;
• and
• a third server in the second security domain having an input coupled to the output of the second server via a second dedicated communications link and an output for access by a client, the third server coupled to a third file repository in the second security domain and configured to receive scanned file segments on the input and to store the received scanned file segments in the third file repository, the third server further configured to supply a received scanned file segment to the client via the output.