Abstract: Examples of the present disclosure describe systems and methods for a bidirectional application programming interface (API) that enables operational action functionality in a one-way transfer (OWT) system. In examples, a data request is received at a first computing environment of an OWT system, where the data request is associated with a first unidirectional dataflow having a transaction identifier. A first set of policies associated with the first computing environment is applied to the data request and the data request is transferred to a second computing environment of the OWT system. The second computing environment retrieves response data for the data request, where the response data is associated with a second unidirectional dataflow having the transaction identifier. A second set of policies associated with the second computing environment is applied to the response data and the response data is transferred to the first computing environment to fulfill the data request.

Abstract: Methods and systems for method for video streaming in a one-way transfer (OWT) system. An example method includes transmitting, from a source computing environment, a video stream for receipt by a destination computing device in a destination computing environment. The video stream is duplicated into a primary video stream and a secondary video stream, both of which are received by a switching device. When the switching device detects an interruption in one of the duplicate data streams, the other stream is transmitted to the destination computing device.

Abstract: Examples of the present disclosure describe systems and methods for implementing a software-based security abstraction engine in a one-way transfer (OWT) system. In examples, data is received at a first device in the OWT system. A first set of policies is identified based on a dataflow identifier associated with the transfer of the data. A policy engine associated with the first set of policies applies the first set of policies to the data to create digital signatures. The digital signatures are evaluated by the security abstraction engine to determine whether the set of digital signatures is valid. If the digital signatures are determined to be valid, a provenance digital signature is created for the data and a second set of policies is applied to the data. The data is then transmitted to a second device or destination in the OWT system based on the dataflow identifier.

Abstract: Methods and systems for transferring data through a one-way transfer (OWT) system using a fault-tolerant data diode. Data from a source computing environment may be converted to an optical signal that is then split into duplicate signals. The duplicate optical signals are received by two receiving devices that have optical receivers. The receiving devices operate as either a primary device or a secondary device to continue transmission of the received data. The operating states of the receiving devices may change based the health or status of the respective devices.

Abstract: Examples of the present disclosure describe systems and methods for UDP file serialization. In examples, a file received at a first device in a OWT system is separated into multiple data chunks. Each of the data chunks is further separated into multiple data segments. Metadata associated with the file is inserted into each of the data chunks and each of the data segments. Data packets that comprise the data segments and compose the data chunks are transmitted to a second device in the OWT system. The second device uses the metadata in the data chunks and the data segments to reconstruct the file. In some examples, data loss mitigation strategies are implemented to mitigate data packet loss and data packet corruption during processing and transmission.

Abstract: Examples of the present disclosure describe systems and methods for a bidirectional application programming interface (API) that enables operational action functionality in a one-way transfer (OWT) system. In examples, a data request is received at a first computing environment of an OWT system, where the data request is associated with a first unidirectional dataflow having a transaction identifier. A first set of policies associated with the first computing environment is applied to the data request and the data request is transferred to a second computing environment of the OWT system. The second computing environment retrieves response data for the data request, where the response data is associated with a second unidirectional dataflow having the transaction identifier. A second set of policies associated with the second computing environment is applied to the response data and the response data is transferred to the first computing environment to fulfill the data request.