The CompConnector is a modular web-based application designed to substantially ease the flow of paperwork that currently is choking workers’ compensation systems nationwide. The Program design has been evolving over several years. This design has incorporated a lot of suggestions made by the actual end-users, such as Medical Providers, Care Managers, Employers and Third Party Administrators.

Technical
The system runs on a Xeon multi-processor servers, using an all RAID configuration for data integrity. It has a redundant, hot-swappable power supply. The databases run on Windows 2000 and are in Microsoft Sequel Server SQL 7. The data base is accessed through ASP, with java applets. The system is accessible through most modern web browsers on any platform.

Security
Security on the Internet is extremely critical, particularly in the Workers’ Compensation field. Many States have extensive legislation on who can and cannot access patient files. Consequently, the Company has developed the application with this in mind. From the point a customer connects to the Internet and accesses the system they are being protected by several levels of security including: Encryption, Router Firewalls, Password Protection, and Isolation of data by physically separating databases from the Internet. The layers of security are itemized below:

Layer 1:
Potential Security Risk: Most customers will be accessing the system via the Internet through some sort of Internet Provider. This means that information transported between the customer and the database will be vulnerable to Internet snooping unless it is secured.

The Solution: With this in mind the Company has designed the system to utilize SSL Encryption to secure all information being transferred between the customer and the Company.

Layer 2:
Potential Security Risk: One of the most popular attacks used on the Internet today is the Denial of Service Attack (DoS) or more commonly known as Smurf Attacks. Unless gateways to the Internet are correctly configured Smurf Attacks of even a small volume can be devastating to a network.

The Solution: To counter this sort of attack the Company has configured its gateways to not respond to ICMP and UDP packets used in Smurf Attacks which ironically is the key to it’s ability to crash a network. By ignoring this traffic it would take an attack of a high magnitude to noticeably affect the network.