Global Access-controlled Transfer e-frame (GATe)

GATe way to the Future of Seamless, Fast & Secure Electronic Transfer Background The Global Access-controlled Transfer e-frame (GATe) is the foundation for developing secure web-based information transfer to meet classified and unclassified business processes. This innovative solution is particularly useful when there is a need to quickly share information with several entities in a controlled and secure environment. It is available 24/7/365 and can share, search, upload, download and retrieve sensitive information, as well as provide reporting capabilities. Many business processes require unique characteristics that make Commercial Off-The-Shelf (COTS) solutions unacceptable. The time necessary to develop a customized solution can be substantially decreased by utilizing GATe as a foundation. The e-frame (or electronic framework or platform) was designed to take advantage of the patterns that occur during an electronic record transfer process. GATe is a framework that can be customized to provide a unique solution by reusing functionality from many previous processes. It is a toolbox of data transfer and reporting functionality that will continue to grow with each application. GATe is the way to the future OR is the future of secure electronic transfer of sensitive information (Official Use Only - OUO / Privacy Act - PA / Personally Identifiable Information - PII / Confidential / Classified, etc.), as well as non-sensitive information. Technology Description GATe provides two-factor authentication, full encryption, https transfer, and uses AES-256 on the data at rest. It manages user authentication through active directory and role-based authorization implemented at the application level. It is completely web-based and does not require the client to install any software to be operational. GATe uses cutting-edge technologies to accomplish all of this functionality. It uses an encrypted SQL Server database for the backend; ASP.NET 4.0 for the web application; Language Integrated Query (LINQ) to Entities for data access and data modeling; jQuery and Asynchronous JavaScript and XML (AJAX) for a more seamless and user-friendly feel on the various web pages. Proven Application The GATe platform has been used to develop the Secure Electronic Records Transfer (SERT) system. The SERT system is a seamless and secure web-based application that searches, retrieves, uploads, downloads, transfers, and protects OUO/ PII and PA data contained in Energy Employees Occupational Illness Compensation Act (EEOICPA) Program claims. SERT follows agency protection requirements, the Health Insurance Portability and Accountability Act (HIPAA) of 1996 and the Federal Information Processing Standards (FIPS) 199 - Standards for Security Categorization of Federal Information and Information Systems. In support of the EEOICPA, the SERT system provides the Department of Energy (DOE), the Department of Labor (DOL), and the National Institute for Occupational Safety and Health (NIOSH) with a secure, efficient means of daily transfers of various occupational history records that need content protection (e.g., personnel, medical, toxic and radiological exposures, etc.). SERT transfers these OUO claims 24//7/365 with seamless and secure operation to and from all of the agencies involved, with over 500 (plus) users around the United States. The agencies can also send the same claim to multiple DOE sites simultaneously. The time required to prepare a claim for transmittal has decreased by approximately 84%. The cost of using the previous methods of shipping and tracking encrypted jump drives via overnight mail services has been eliminated completely for all agencies and sites involved with EEOICPA. With SERT, the transmittal of claims is now instantaneous, available 24/7, and there are no limits on shipping during regular business hours only, as before. All of these things have contributed to increased productivity and reduced claim turnaround response time, as well as provided significant cost-cutting measures to all agencies and ultimately the taxpayers. The DOE, DOL and NIOSH are extremely pleased with the efficiency, ease of operation, security, communication, collaboration, and the cost-effectiveness of the SERT system. The DOE published the following statement: "HSS believes that the implementation of the SERT system will be the single biggest improvement in how DOE processes EEOICPA requests since 2001. " --The DOE Office of Health, Safety and Security (HSS) Message Newsletter, June 2012 SERT has provided the first step to agency integration and has significantly enhanced efficient, secure collaboration. Without GATe, the SERT system would not have been possible. The GATe framework is now ready to be customized to meet the needs of other commercial and government applications immediately. Benefits for Future Opportunities Increased Security & Efficiency -- Anyone with a need to share unclassified sensitive or classified information seamlessly, securely, instantly, with reduced operational costs may have an interest in the GATe framework. Those with complex processes who have failed to find Commercial Off- The-Shelf (COTS) solutions and are considering developing their own solution may find GATe particularly valuable. Those with a need to share sensitive or classified information with multiple entities 24/7 would find the efficiencies and security of GATe unparalleled. As proven with SERT, these efficiencies equate to significant reduced operational costs as an added benefit. Enhanced Collaboration & Communication -- GATe may be of interest in a stand-alone capacity to share sensitive or classified information for private or municipal entities (e.g., within the same hospital group, physician's group, financial institution, attorney's group, emergency services company, and insurance company, etc.). From a broader perspective and with increased benefits, it can also be used across entity lines (e.g., banking with collections, attorneys with courts, collections, and financial institutions, doctors with hospitals and patients, etc.). In both cases, the entities interact with each other in a secure environment to share, search, upload, download and retrieve sensitive or classified information around the clock, around the region and around the globe, as there is no time or geographic limitations. Reduced Cost for Customized Application -- Finally, GATe provides an avenue to share sensitive and classified information at a fraction of the cost of developing a secure system from scratch. Any company with a need to protect OUO, PII, PA, and classified information and/or meet HIPAA or FIPS standards may have an interest in GATe. A sampling of areas of industry and/or business that could benefit with the ability to transfer secure data in an efficient and low-cost environment such as the GATe framework include Insurance, Banking/Lending/Credit Unions, Police/Sheriff, Courts/Jails, Motor Vehicle, Lawyers, Tax Assessors, Collections/Billing Companies, Hospitals/Clinics, Doctors, and Patients, just to name a few. The required investment to customize the technology for any market would be dependent on the complexity of the processes employed. For example, we estimate that a development effort of 800 hours may be decreased by 50% when starting with the GATe Framework. Competition and Uniqueness in the Marketplace -- GATe fills a niche which offers the ability to create affordable, reduced-cost customization and seamless operation for processes that require security for transfer of sensitive or classified information between multiple entities (for example, to / from police departments, attorneys, gun registrars, motor vehicle departments, bails bonds companies, courts, OR from / to doctors, hospitals, medical laboratories, therapists, patients, etc.). This is also unique in that it requires little / or no investment for equipment. There are unlimited processes around the world in need of GATe. Intellectual Property Position GATe is currently under copyright to Battelle Energy Alliance (BEA), the M&O contractor for the DOE, at the Idaho National Laboratory. BEA is currently seeking partnership through licensing opportunities to develop additional applications that could be built upon the GATe software framework. Additionally, it is anticipated that as new applications using GATe are developed, framework capabilities will be enhanced and improved. These are areas for additional intellectual property development. GATe Licensing or Partnering Contact Information Idaho National Laboratory Technology Deployment 1955 N. Fremont Ave. P.O. Box 1625 Idaho Falls, ID 83415 Mark Kazcor (208) 526-0360 mark.kaczor@inl.gov