Patent ID: 7689699

Claim:
A method of transmitting information from a source security domain associated with a first security classification to one of a plurality of destination security domains associated with a second security classification, comprising the steps of: transmitting a target service request having routing information from the source security domain to a source one-way high assurance guard (HAG) service; inspecting the target service request in the source one-way HAG service to determine if the target service request violates at least one rule governing communications transmitted from the first security domain; transmitting the target service request to a destination one-way HAG service in the destination security domain via a one-way HAG according to the routing information if the target service request does not violate the at least one rule and discarding the second target service request if the target service request violates the at least one rule; and providing the target service request to the target service; wherein the target service request is wrapped in a second message to the source one-way HAG service, inspected by the source one-way HAG service to determine if the wrapped target service request violates the at least one rule, and unwrapped in the destination one-way HAG service.