Manualshelf

User guide

ManualsBrandsBlackberry ManualsOtherENTERPRISE SOLUTION SECURITY - ENFORCING ENCRYPTION OF INTERNAL AND EXTERNAL FILE SYSTEMS ON DEVICES
11121314151617181920
Key Description
ECC public key The ECC public key encrypts the stored data that the BlackBerry device receives
when the BlackBerry device is locked.
ephemeral key The ephemeral key encrypts the ECC public key, ECC private key, and content
protection key on the BlackBerry device.
PIN encryption key The PIN encryption key scrambles PIN messages.
principal encryption key If you or a user turns on content protection, the principal encryption key encrypts
the device transport key and PIN encryption key that is specific to your organization
when the BlackBerry device is locked.
message keys The message keys (also known as session keys) encrypt data sent to and from the
BlackBerry device.
Device transport keys
The device transport key encrypts the message keys that help protect the data sent between a BlackBerry® Enterprise Server
and BlackBerry device. The BlackBerry Enterprise Server and BlackBerry device generate the device transport key when a user
activates the BlackBerry device.
The BlackBerry Enterprise Server and BlackBerry device do not send the device transport key over the wireless network when
they generate the device transport key or when they exchange messages.
The BlackBerry® Enterprise Solution is designed so that only the BlackBerry Enterprise Server and BlackBerry device know the
value of the device transport key. The BlackBerry Enterprise Server and BlackBerry device reject a data packet if they do not
recognize the format of a data packet or do not recognize the device transport key that protects the data packet.
States for device transport keys
The BlackBerry® Enterprise Solution generates device transport keys on a regular basis so that a potentially malicious user cannot
access all data sent between a BlackBerry® Enterprise Server and BlackBerry device if that user compromises a device transport
key. As the BlackBerry Enterprise Solution generates device transport keys, the device transport keys change state from pending
to current to previous.
Security Technical Overview
Device transport keys
18