User guide

Protecting communications in
your organization's
environment
How a BlackBerry Enterprise Server and the
BlackBerry Infrastructure authenticate with
each other
The BlackBerry Infrastructure and BlackBerry Enterprise Server must authenticate with each other before they can
transfer data. The BlackBerry Enterprise Server uses SRP to authenticate with and connect to the BlackBerry
Infrastructure.
SRP is a point-to-point protocol that runs over TCP/IP. The BlackBerry Enterprise Server uses SRP to contact the
BlackBerry Infrastructure and open a connection. When the BlackBerry Enterprise Server and BlackBerry Infrastructure
open a connection, they perform the following actions:
• authenticate with each other
• exchange configuration information
• send and receive data
The BlackBerry Enterprise Server and BlackBerry Infrastructure use the SRP authentication key when they authenticate
with each other. The SRP authentication key is a 20-byte encryption key that the
BlackBerry Enterprise Server and
BlackBerry Infrastructure share.
The BlackBerry Enterprise Server sends only outgoing traffic to a BlackBerry device using an authenticated connection to
the BlackBerry Infrastructure.
11
Security Technical Overview Protecting communications in your organization's environment
89