User guide

Process flow: Authenticating the application loader tool or Roxio Media Manager with the

BlackBerry Desktop Software using the BlackBerry inter-process protocol

1. The application loader tool of the BlackBerry® Desktop Software or Roxio® Media Manager opens a connection to BlackBerry

Desktop Software version 4.2 or later.

2. The BlackBerry Desktop Software implementation of the BlackBerry inter-process protocol performs the following actions:

a. uses a shared secret password (also known as the secure communication password) and the ECDH protocol with a

521-bit curve to create a device transport key

b. uses the device transport key to create two encryption keys and two HMAC-SHA-256 keys

c. uses one encryption key and one HMAC key to encrypt and authenticate data that BlackBerry Desktop Software version

4.2 or later sends over the communication channel to the BlackBerry® Enterprise Solution components that share the

secure communication password

The BlackBerry inter-process protocol uses one encryption key and one HMAC key to encrypt and authenticate data that

BlackBerry Desktop Software version 4.2 receives over the communication channel from the application loader tool or Roxio

Media Manager.

How the BlackBerry Collaboration Service protects the connections between

the BlackBerry Collaboration Service and instant messaging server

The BlackBerry® Collaboration Service is designed to connect to an instant messaging server and the collaboration clients on

BlackBerry devices. If your organization’s instant messaging server is Microsoft® Office Live Communications Server 2005 or

Microsoft® Office Communications Server 2007, the BlackBerry Collaboration Service connects to the Microsoft® Office

Communicator Web Access server using HTTPS or HTTP.

Security Technical Overview

How the BlackBerry Collaboration Service protects the connections between the BlackBerry Collaboration Service and

instant messaging server