Strong security using CIECA BMS

Insurance companies

Certainly and without question, protecting claim data is crucial for insurance carriers. While safeguards exist within carriers' internal IT systems, it becomes more difficult to ensure strict information security when working with an extended network of repair facilities and the myriad of downstream software apps that exist.

Historically, CIECA EMS has been used to exchange estimate data between various apps used by collision repairers, however, the EMS data standard is dated and lacks the modern security controls needed to protect data. To solve this problem, CIECA published the BMS specification which allows for granular control of data elements. With BMS, it's now possible to control which data elements are shared with a given downstream application.

Introducing the CCC Secure Share™ Network

CCC is launching the CCC Secure Share™ network (CCC Secure Share) to provide collision repairers with a simple and easy way to share data with third party applications using BMS. More importantly, it provides a transparent definition of the data elements that will be shared with each application category. For example, a Paint Materials Calculator application will receive information needed to perform paint cost calculations, whereas a CSI application will receive data related to conducting a CSI survey.

How does CCC Secure Share work?

STEP 1: CCC Secure Share is a network that permits approved third party apps to exchange data with collision repairers using the CCC ONE platform. To participate, the app developer must agree to limit the use of the data to permitted uses and protect data from misuse.

STEP 2: Within the CCC ONE platform, collision repairers may browse a listing of third party apps and activate data sharing with one or more apps. Repairers can select certain parameters like insurance company and vehicle make to limit the data they share with a third party app developer.

STEP 3: A third party app developer may accept or reject the request from the collision repairer to share data.

STEP 4: If both the collision repairer and third party app developer agree, then CCC Secure Share will activate data sharing (via BMS).

How are EMS and BMS different?

At its core, CCC Secure Share uses BMS to provide layers of data protection that don't exist with traditional EMS, including:

Encryption Data is 128-bit encrypted during transmission.
Secure data sharing Collision repairers decide whether to share data with third party software app(s).
Transparency Apps are classified by type and limited data elements are exchanged based on app category. For example, a CSI app would receive estimate data elements relevant to conducting a CSI survey, not the full estimate.
Cloud-based Integration is cloud based, so no data is saved to local disk.
Security logging All transactions between apps are logged.

Rollout plan

Effective October 1, 2016, software vendors can register for access to the CCC Secure Share API documentation. In April 2017, CCC will launch CCC Secure Share which will permit collision repairers to browse a directory of third party apps and activate or deactivate data sharing with those apps.

Support for EMS files in CCC ONE will end in April 2018. In the meantime, to facilitate a seamless transition to the new BMS standard, CCC ONE® Estimating will support both EMS and BMS.

More Information

If you have questions or would like to learn more about CCC Secure Share, you can contact us or checkout FAQs for answers to common questions.