Installation guide

BlackBerry Enterprise Solution 81
If the BlackBerry device accepts y
B
, the BlackBerry Enterprise Server and the BlackBerry device open an
authenticated connection between them.
If the BlackBerry device calculates that y
B
P + e
B
R
B
≠ hP, the BlackBerry device rejects the connection
attempt. The BlackBerry Enterprise Server and the BlackBerry device do not open an authenticated
connection between them.
If the BlackBerry Router calculates that y
B
P + e
B
R
B
≠ y
D
P + e
D
R
D
, the BlackBerry Router rejects the
connection attempt.
If the BlackBerry Enterprise Server calculates that y
D
P + e
D
R
D
≠ hP, the BlackBerry Enterprise Server rejects
the connection attempt.
20. The BlackBerry Router stores R
D
, R
B
, y
D
P + e
D
R
D
, e
D
, and e
B
.
21. The BlackBerry Enterprise Server stores R
D
, R
B
, e
D
, e
B
, and h.
22. The BlackBerry Router and the BlackBerry Enterprise Server overwrite y
B
and y
D
in memory with zeroes.
Process flow: Using the BlackBerry Router protocol to close an authenticated connection
1. The BlackBerry Enterprise Server picks a random value r
C
, where 1 < r
c
< p – 1.
2. The BlackBerry Enterprise Server calculates R
C
= r
C
P.
If R
C
equals R
B
, or R
B
equals R
D
the BlackBerry Enterprise Server calculates another R
C
value.
3. The BlackBerry Enterprise Server sends the value R
C
to the BlackBerry Router to initiate connection closure.
4. The BlackBerry Router performs the following calculations:
• checks that when the value R
C
approaches the point at infinity, the value R
C
is random
• checks that when the value R
C
equals R
B
, or R
B
equals R
D
, the value R
C
is random
5. The BlackBerry Router picks a random value e
C
, where 1 < e
c
< p – 1.
If e
C
equals e
D
, or e
c
equals e
B
the BlackBerry Router calculates another e
C
value.
6. The BlackBerry Router sends the value e
C
to the BlackBerry Enterprise Server.
7. The BlackBerry Enterprise Server performs the following calculations:
• checks that when the value e
C
equals 0, the value e
C
is random
• checks that when the value e
C
equals e
B
, or e
C
equals e
D
, the value e
C
is random
8. The BlackBerry Enterprise Server calculates y
C
= h – e
C
r
C
mod p.
9. The BlackBerry Enterprise Server sends the value y
C
to the BlackBerry Router.
If the BlackBerry Router accepts y
C
, the BlackBerry Router closes the authenticated connection to the
BlackBerry device on behalf of the BlackBerry Enterprise Server.
If the BlackBerry Router calculates that y
C
P + e
C
R
C
≠ y
D
P +e
D
R
D
, the BlackBerry Router rejects the
connection close attempt. The BlackBerry Router does not close the authenticated connection to the
BlackBerry device.
©
2008 Research In Motion Limited. All rights
reserved.
www.blackberry.com