Project Sponsor: Leidos QTC Health Services
Technical Contacts: Edmundo Guzman-Meza, Denise Tabilas
Faculty Advisor: Huiping Guo

Project Overview

This project focuses on developing a secure, enterprise-grade web application to streamline the management of medical claim workflows for Leidos QTC Health Services. Currently, administrators rely on manual SQL scripting to configure complex workflows, which poses risks to data integrity and operational efficiency.

Our team is building a robust, standalone ASP.NET Core MVC application that serves as a graphical interface for the existing Workflow Queue (WFQ) system. By leveraging Entity Framework Core for direct database transactions and strictly adhering to Microsoft enterprise standards, this solution allows administrators to dynamically configure workflows, reassign tasks, and audit system changes. The project emphasizes strict adherence to HIPAA/HITECH compliance, query-string authenticated access authorization, and data integrity within a high-volume medical processing environment.

Project Milestones

- Fall 2025 (Foundation): Analyzed the legacy SQL Server database schema and designed a monolithic architecture that interfaces securely without modifying the underlying structure. Key achievements included the Software Design Document (SDD), SQL Server 2019 environment configuration, establishing secure URL-based administrative gating, and deploying the primary Workflow Dashboard UI.

- Spring 2026 (Execution): Finalizing the implementation of critical administrative business logic, including dynamic step configuration, task reassignment, PDF/CSV reporting exports, and strict "safe delete" protocols for workflow steps with dependency checking. 

Technical Implementation

The application is built on the ASP.NET Core 8 MVC framework, utilizing a strict "Database-First" approach to integrate with Leidos QTC's legacy systems without altering their existing data structures. The architecture is organized into three primary layers:

- Presentation Layer (Razor Views & UI): The frontend utilizes heavily customized Bootstrap and HTML HTML5/CSS3 within ASP.NET Razor views. It abstracts complex data into highly readable dashboards, ensuring strict compliance with QTC branding and Section 508 accessibility standards.

- Business Logic & Security Layer (Controllers & Services): This layer intercepts user actions, enforces security, and manages complex operations. A custom AdminAuthorizationFilter enforces strict URL-based gating (?admin=true) to bypass traditional login vulnerabilities. Service classes handle transactional requirements, such as dynamically re-sequencing workflow steps and securely reassigning orphaned medical tasks.

- Data Access Layer (Entity Framework Core & SQL Server): EF Core translates backend commands into parameterized queries. This ensures absolute protection against SQL injection while maintaining strict foreign key constraints and data integrity across the Workflow, WorkflowStep, and Task tables.