IEHP EDI SFTP (SECURE FILE TRANSFER PROTOCOL) Connection
IEHP EDI SFTP (the Secure File Transfer Protocol) server is utilized to conduct all electronic data file transactions with contracted providers related to Member eligibility, encounter data, bedday reporting, capitation reports and electronic claims submissions. Some of the benefits to using the SFTP are:
- SFTP is a standard protocol for file transfer. SFTP is a universally used tool for securely exchanging files between entities.
- SFTP provides additional security. A username and password must be used to establish a connection and data is encrypted during transmission. Each Provider has their own credentials to ensure file transmissions are secure and can be tracked.
- SFTP is more flexible. Files placed on the SFTP server are available until they are picked up. The SFTP server can be accessed twenty-four (24) hours a day, seven (7) days a week. Files remain on the SFTP server for ninety (90) days. They are to be deleted by the submitter. They can be re-accessed multiple times and do not have to be retransmitted.
- SFTP complies with HIPAA requirements. Every file that is transmitted to IEHP is encrypted.
The SFTP server can be accessed via a web browser, but there are several graphical user interface (GUI) based SFTP client programs available as well. Examples of these include WS_FTP, FileZilla, and CoreFTP. SFTP functionality may also come bundled into other software products such as Microsoft SSIS and WRQ Reflection. Since the use of an SFTP client varies from vendor to vendor, IEHP is providing instructions for using the internet browser web interface only.
With some of our transactions, file encryption is utilized to ensure security. IEHP has chosen GNU Privacy Guard (GPG) as our encryption program, but there others also available that take advantage of the OpenPGP standards, like PGP. These are very powerful and fairly easy to use packages that are transportable across several popular platforms. There are many levels of security that can be employed. Both commercial and open source software packages based on the OpenPGP Standard can be found.