Washington Publishing Company (WPC) specializes in managing and distributing Electronic Data Interchange (EDI) information, primarily in the form of documentation for organizations that develop, maintain, and implement EDI standards.

The Health Insurance Portability and Accountability Act of 1996 (HIPAA) requires all US healthcare entities to send electronic administrative information via electronic data interchange (EDI) in a single standard. In response, the Electronic Healthcare Network Accreditation Commission (EHNAC), a partner of WPC's, wanted to implement a secure online method of validating members' EDI transactions.

• Security
  Many of the uploaded transactions contain sensitive information. Users were concerned about sending proprietary health care and insurance information over the Internet.
• Upgradability
  The client wanted to be able to add new transaction set formats without taking the site out of operation.
• Performance/Ease of use
  The system needed to be fast and easy enough to make it possible for each of its member companies to validate hundreds of transactions.
• Verifiable Results
  The result of each test is cryptographically signed as proof of compliance. In addition, the system maintains a database of companies which have passed compliant transactions.

STFCS is a web application which runs on Microsoft Internet Information Server and Microsoft SQL Server. Submissions are sent to a custom Internet Server API (ISAPI) module, which sends the request on to a separate, replaceable module containing the transaction validator. Results are signed using the RSA public-key cryptographic algorithm and EHNAC's public key.

Electronic Data Interchange (EDI), end-to-end electronic commerce, security & encryption, component development, Borland Delphi, Perl and JavaScript, Microsoft SQL Server, object-oriented programming, object-oriented analysis and design, Unified Modeling Language (UML), web-based programming, client-server programming.

Fenestra provided a system which was secure, while at the same time allowing a large distributed user-base to learn and operate it easily.

We clearly understood the client's needs, and worked with them to facilitate the process from inception to launch.