Strong security using CIECA BMS

Insurance companies

Certainly and without question, protecting claim data is crucial for insurance carriers. While safeguards exist within carriers' internal IT systems, it becomes more difficult to ensure strict information security when working with an extended network of repair facilities and the myriad of downstream software apps that exist.

For many years, CIECA EMS has been used to exchange estimate data between various apps used by collision repairers, yet the EMS data standard is dated and lacks the modern security controls needed to protect data. To solve this problem, CIECA published the BMS specification which allows for granular control of data elements. With BMS, it's now possible to control which data elements are shared with a given downstream application.

Unequivocally, CCC is committed to both EMS and BMS.

Introducing the CCC Secure Share™ Network

CCC is launching the CCC Secure Share™ network (CCC Secure Share) to provide collision repairers with a simple and easy way to share data with third party applications using BMS. More importantly, it provides a transparent definition of the data elements that will be shared with each application category. For example, a Paint Materials Calculator application will receive information needed to perform paint cost calculations, whereas a CSI application will receive data related to conducting a CSI survey.

How does CCC Secure Share work?

STEP 1: CCC Secure Share is a network that permits approved third party apps to exchange data with collision repairers using the CCC ONE platform.

STEP 2: Within the CCC ONE platform, collision repairers may browse a listing of third party apps and activate data sharing with one or more apps. Repairers can select certain parameters like insurance company and vehicle make to filter the data they share with a third party app developer.

STEP 3: A third party app developer may accept or reject the request from the collision repairer to share data.

STEP 4: If both the collision repairer and third-party app developer agree, then CCC Secure Share will activate data sharing (via BMS).

How are EMS and BMS different?

At its core, CCC Secure Share uses BMS to provide layers of data protection that don't exist with traditional EMS, including:

Encryption Data is 128-bit encrypted during transmission.
Secure data sharing Collision repairers decide whether to share data with third party software app(s).
Transparency Apps are classified by type and limited data elements are exchanged based on app category. For example, a CSI app would receive estimate data elements relevant to conducting a CSI survey, not the full estimate.
Cloud-based Integration is cloud based, so no data is saved to local disk.
Security logging All transactions between apps are logged.

Architecture

CCC ONE for collision repairers supports both traditional EMS and BMS (i.e. CCC Secure Share) concurrently. It is up to each collision repairer to configure and control data export settings for EMS and BMS.

More Information

If you have questions or would like to learn more about CCC Secure Share, you can contact us or checkout FAQs for answers to common questions.