CMS Internet Usage

Federal Register / Vol. 68, No. 158 / Friday, August 15, 2003 / Rules and Regulations

            -At present, Medicare does not accept claims via the internet, an extranet or, in many          cases, via removable/transportable storage media.

To date there has been no change to this policy.  However, CMS is working towards a solution they feel will meet their security requirements. 

CMS Internet Architecture- (Published; May 1, 2008)

The Architecture for the CMS Internet platform consists of 3 zones with each zone separated by firewalls to support web application systems.

1. The Presentation Zone only support web servers
2. The Application Region supports only business logic for the applications.
3. The Secure Region contains the database servers used by the web applications.  When implemented, the “Secure Region” will house database servers supported not only within CMS, but can include databases accessed across all CMS, securely linking CMS’ Contractors.

Currently, CMS has two internet based transaction pilots; WPS and NHIC.  Neither of which include Medicare claims submissions.

Contractors must have CMS approved Internet systems in order to send or receive Medicare data over the open internet.  Currently only 3 Medicare contractors’ systems meet CMS requirements to use the Internet.

1. WPS (C-SNAP)
2. Noridian
3. NHIC

Providers can use CMS approved Network Service Vendors to send and receive data via Internet.

1. VisionShare
2. IVANS

A  Network Service Vendor’s system has the CMS approved 3 zone internet architecture.  They have facilitated their approval through the Enterprise Data Center Group with the Office of Information Services @ CMS.