US 11,954,211 B2
Secure data collection from an air-gapped network
Cody Wolf, Zug (CH); Sreenevas Subramaniam, Dublin, CA (US); Séverin Launiau, Cary, NC (US); Luke Andrew Kasper, Lansdale, PA (US); Evan Orgel, Edison, NJ (US); and Ryan Craig Zulli, Rockaway, NJ (US)
Assigned to ServiceNow, Inc., Santa Clara, CA (US)
Filed by ServiceNow, Inc., Santa Clara, CA (US)
Filed on Apr. 14, 2021, as Appl. No. 17/230,767.
Prior Publication US 2022/0335141 A1, Oct. 20, 2022
Int. Cl. G06F 21/60 (2013.01); G06F 9/445 (2018.01); G06F 21/10 (2013.01); G06F 21/62 (2013.01)
CPC G06F 21/604 (2013.01) [G06F 9/44505 (2013.01); G06F 21/105 (2013.01); G06F 21/6218 (2013.01); G06F 21/107 (2023.08); G06F 2221/2141 (2013.01)] 20 Claims
OG exemplary drawing
 
1. A method, comprising:
providing a computer program component configured to collect configuration item data from information technology resources of an air-gapped network for an information technology configuration management database;
obtaining configuration item data collected from the information technology resources of the air-gapped network using the provided computer program component, wherein the obtained configuration item data is physically transferred between a device within the air-gapped network and a device outside the air-gapped network at least in part via a portable physical storage medium, and the collected configuration item data has been reviewed and filtered within the air-gapped network prior to being physically transferred via the portable physical storage medium, and wherein the collected configuration item data has been filtered including by using a specified item data property to automatically identify a collected information of interest about a discovered information technology asset among the collected configuration item data and irreversibly modify the collected information of interest about the discovered information technology asset among the collected configuration item data being physically transferred, and wherein based on a type of content that has been modified in the collected information of interest, a new automatic rule indicating the type of content to be avoided during a future data collection is saved;
importing the obtained configuration item data to the information technology configuration management database outside the air-gapped network; and
providing information technology management services for the air-gapped network using the imported configuration item data stored outside the air-gapped network.