
Criteria Description
integrity The BlackBerry Enterprise Solution helps protect each message that a BlackBerry device
sends using one or more message keys. Designed to prevent a third party from decrypting
or altering the message data, the message keys consist of random data.
The BlackBerry Enterprise Solution is designed so that only the BlackBerry Enterprise
Server and a BlackBerry device know the value of a master encryption key, recognize the
format of a decrypted and decompressed message, and automatically reject a message
that is not encrypted with the correct master encryption key.
authenticity A BlackBerry device authenticates itself with the BlackBerry Enterprise Server to prove
that it knows the master encryption key before the BlackBerry Enterprise Server can send
data to the BlackBerry device.
Master encryption keys
The BlackBerry® Enterprise Server and the BlackBerry device each store a copy of the unique master encryption key of the
BlackBerry device.
When you activate a BlackBerry device over the wireless network, the BlackBerry Enterprise Server and BlackBerry device use an
authenticated link to communicate the value of the master encryption key.
For a user to send and receive messages on the BlackBerry device, the BlackBerry Enterprise Server and BlackBerry device must
store matching copies of the master encryption key of the BlackBerry device. If the stored keys do not match, the following actions
occur:
• BlackBerry Enterprise Server and BlackBerry device delete messages that they receive from each other because they cannot
decrypt them
• BlackBerry device requires the user to generate a new master encryption key
Standard BlackBerry encryption
The BlackBerry® Enterprise Solution uses a symmetric key encryption algorithm that is designed to protect data in transit between
a BlackBerry device and the BlackBerry® Enterprise Server. Standard BlackBerry encryption, which is designed to provide strong
security, helps protect data in transit to the BlackBerry Enterprise Server when message data is outside of the organization's
firewall.
Standard BlackBerry encryption is designed to encrypt messages that a BlackBerry device sends or that the BlackBerry Enterprise
Server forwards to the BlackBerry device. Standard BlackBerry encryption encrypts messages as follows:
• from the time the user sends an email message or PIN message from the BlackBerry device to the time when the BlackBerry
Enterprise Server receives the message
Feature and Technical Overview
BlackBerry Enterprise Solution security
44
Comentários a estes Manuais