13 / 35
SBM, the HTTP system definitions have been transferred
here so that all the insurance companies can connect to
Insurance Information and Monitoring Centre via secure
HTTPs channel.
Benefits
Confidential information is encrypted on its way that they can
be only read by the relevant company and SBM. Encryption
is made by 2048 bit RSA key provided by Global Sign SSL
certificate authority.
We are now in compliance with COBIT standards in terms
of information security as a result of HTTPs migration.
Since data transfer between the companies and SBM are
done with encryption, even though people with fraudulent
intention has access to the data, they cannot read or alter
its content.
The trust has been established between the SBM, the
insurance companies, and the clients whose data is kept
in our systems after migration to HTTPs.
Important and critical information, notably the policy and
damage information of insurance companies, are kept at
the data centre of Insurance Information and Monitoring
Centre. Insurance companies have access to this data via
web applications and services.
Web applications and services can work on two different
protocols. These are, "HTTP" protocol in which the data
flows without encryption, and HTTPs protocols in which
data flows with encryption. In cases where the data is
transmitted via HTTP, all the data can be accessed by wire-
tapping on any web device in which these critical and confi-
dential information pass through. In case of interception
of the data during transmission via HTTPs “Secure HTTP”
protocol, it is almost impossible to decipher, and this is
provided technically by RSA 2048 bit encryption.
According to the sub-paragraph 5 of Article 31/B of the
Insurance Law, it is provided that “all the transactions and
records of Insurance Information and Monitoring Centre
are confidential”, which mandates it as a legal requirement
to increase security measures to prevent unauthorized
access to data; therefore, the environment required for
“Secure HTTP” has been established by the joint work of
Migration of SBM Web Applications and Services from
HTTP to HTTPs Secure Web Protocol
Projects From SBM Which Will Take the Sector One Step Further
CURRENT 13