User guide

Overview

BlackBerry Enterprise Solution security

The BlackBerry® Enterprise Solution consists of various products and components that are designed to extend your organization’s

communication methods to BlackBerry devices. The BlackBerry Enterprise Solution is designed to protect data that is in transit

at all points between a BlackBerry device and BlackBerry® Enterprise Server. To protect data that is in transit over the wireless

network, the BlackBerry Enterprise Server and BlackBerry device use symmetric key cryptography to encrypt the data. Only the

BlackBerry Enterprise Server and BlackBerry device can decrypt the data that they send between each other. The BlackBerry

Enterprise Server is designed to prevent third parties, including wireless service providers, from accessing your organization's

potentially sensitive information in a decrypted format.

The BlackBerry Enterprise Solution uses confidentiality, integrity, and authenticity, which are principles for information security,

to help protect your organization from data loss or alteration.

Principles Description

confidentiality The BlackBerry Enterprise Solution uses symmetric key cryptography to help make

sure that only intended recipients can view the contents of email messages.

integrity The BlackBerry Enterprise Solution uses symmetric key cryptography to help protect

every email message that the BlackBerry device sends and to help prevent third

parties from decrypting or altering the message data.

Only the BlackBerry Enterprise Server and BlackBerry device know the value of the

keys that they use to encrypt messages and recognize the format of a decrypted

and decompressed message. The BlackBerry Enterprise Server or BlackBerry device

reject a message automatically that is not encrypted with keys that they recognize

as valid.

authenticity Before the BlackBerry Enterprise Server sends data to the BlackBerry device, the

BlackBerry device authenticates with the BlackBerry Enterprise Server to prove that

the BlackBerry device knows the device transport key that is used to encrypt data.

Security Technical Overview

Overview