Blackberry ENTERPRISE SOLUTION SECURITY - SECURITY FOR DEVICES WITH BLUETOOTH WIRELESS TECHNOLOGY - TECHNICAL Guide d'installation

BlackBerry Enterprise Solution Security Version 4.1.0 Technical Overview© 2006 Research In Motion Limited. All rights reserved. www.blackberry.com

BlackBerry Enterprise Solution Security BlackBerry encryption keys 10 5. The BlackBerry Enterprise Server uses SHA512 to hash the 521-byte value to

BlackBerry Enterprise Solution Security BlackBerry encryption keys 11 User data encryption process on a locked BlackBerry device 1. The BlackBerry d

BlackBerry Enterprise Solution Security BlackBerry symmetric key encryption algorithms 12 BlackBerry symmetric key encryption algorithms A symmetric

BlackBerry Enterprise Solution Security BlackBerry symmetric key encryption algorithms 13 When a user sends a message from the BlackBerry device, the

BlackBerry Enterprise Solution Security BlackBerry wireless messaging security 14 BlackBerry wireless messaging security The BlackBerry Enterprise So

BlackBerry Enterprise Solution Security BlackBerry wireless messaging security 15 2. The BlackBerry Infrastructure routes the encrypted message to t

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 16 SMS and MMS messaging SMS and MMS messaging are available o

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 17 The PGP Support Package includes tools for obtaining PGP ke

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 18 3. The BlackBerry device sends the encrypted message to th

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 19 PKI component support The S/MIME Support Package is designe

BlackBerry Enterprise Solution Security Contents Wireless security...

BlackBerry Enterprise Solution Security Extending BlackBerry device messaging security 20 S/MIME certificates When a user sends an encrypted message

BlackBerry Enterprise Solution Security Protecting stored data 21 • the BlackBerry Enterprise Server restarts • the password times out (the defaul

BlackBerry Enterprise Solution Security Protecting stored data 22 IT policy signing and storage on the BlackBerry device An IT policy is a collection

BlackBerry Enterprise Solution Security Protecting stored data 23 BlackBerry device application User data calendar • subject • location • organ

BlackBerry Enterprise Solution Security Protecting stored data 24 Enabling protected storage of master encryption keys on a locked BlackBerry device

BlackBerry Enterprise Solution Security BlackBerry architecture component security 25 Configuring memory cleaning Users can configure the memory clea

BlackBerry Enterprise Solution Security BlackBerry architecture component security 26 See the BlackBerry Enterprise Server Feature and Technical Over

BlackBerry Enterprise Solution Security BlackBerry architecture component security 27 Configuration option Recommendations shield your Microsoft SQL

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 28 Configuration option Recommendations delete unsecure

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 29 A BlackBerry device can bypass SRP connectivity and a

BlackBerry Enterprise Solution Security Messaging server ...

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 30 Step Action Description 3 The BlackBerry Enterpris

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 31 Step Action Description 2 The BlackBerry Router au

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 32 Step Action Description 4 The BlackBerry Enterpris

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 33 Security measure Description The BlackBerry Enterpri

BlackBerry Enterprise Solution Security Protecting the BlackBerry Infrastructure connections 34 Messaging server Data traffic encryption method Micr

BlackBerry Enterprise Solution Security Authenticating a user 35 HTTPS protocol BlackBerry MDS encryption method Description handheld mode TLS/SSL T

BlackBerry Enterprise Solution Security Authenticating a user 36 • what they know (their smart card password). The BlackBerry Smart Card Reader inte

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 37 If the BlackBerry device is running either BlackBerry Device Software versi

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 38 You can add a new IT policy rule to, remove a new IT policy rule from, or c

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 39 • Restrict device resources available to third-party applications See the

BlackBerry Enterprise Solution Security Wireless security 4 This document describes the security features of the BlackBerry® Enterprise Solution and

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 40 Protecting the BlackBerry device against malware Java-based BlackBerry devi

BlackBerry Enterprise Solution Security Controlling BlackBerry devices 41 BlackBerry Enterprise Solution security method Description code signing •

BlackBerry Enterprise Solution Security Protecting lost, stolen, or replaced BlackBerry devices 42 BlackBerry Enterprise Solution security method Des

BlackBerry Enterprise Solution Security Protecting lost, stolen, or replaced BlackBerry devices 43 Erasing data from BlackBerry device memory and mak

BlackBerry Enterprise Solution Security Related resources 44 Related resources Resource Information BlackBerry Enterprise Server Feature and Technic

BlackBerry Enterprise Solution Security Related resources 45 Resource Information PGP Support Package User Guide Supplement • installing the PGP Su

BlackBerry Enterprise Solution Security Appendix A: RIM Cryptographic Application Programming Interface 46 Appendix A: RIM Cryptographic Application

BlackBerry Enterprise Solution Security Appendix A: RIM Cryptographic Application Programming Interface 47 Key agreement schemes Algorithm Key lengt

BlackBerry Enterprise Solution Security Appendix B: TLS and WTLS standards that the RIM Crypto API supports 48 Appendix B: TLS and WTLS standards tha

BlackBerry Enterprise Solution Security Appendix B: TLS and WTLS standards that the RIM Crypto API supports 49 Symmetric algorithms that the RIM Cryp

BlackBerry Enterprise Solution Security BlackBerry Enterprise Solution security 5 Concept Description BlackBerry Enterprise Solution implementation

BlackBerry Enterprise Solution Security Appendix C: Previous version of wired master encryption key generation 50 Appendix C: Previous version of wir

BlackBerry Enterprise Solution Security Appendix D: BlackBerry device wipe process 51 Appendix D: BlackBerry device wipe process A BlackBerry device

BlackBerry Enterprise Solution Security Appendix D: BlackBerry device wipe process 52 3. Writes 0xCC to each byte (0x1100 11002). 4. Clears all byt

BlackBerry Enterprise Solution Security Appendix E: Ephemeral AES encryption key derivation process 53 Appendix E: Ephemeral AES encryption key deriv

BlackBerry Enterprise Solution Security 54 Part number: 7121119version2 ©2006 Research In Motion Limited. All Rights Reserved. The BlackBerry and RIM

BlackBerry Enterprise Solution Security BlackBerry encryption keys 6 New security features Feature Software versions supported Description protect

BlackBerry Enterprise Solution Security BlackBerry encryption keys 7 Master encryption key storage The BlackBerry configuration database, the messagi

BlackBerry Enterprise Solution Security BlackBerry encryption keys 8 Key generation method Initial key generation Key regeneration wireless Wirele

BlackBerry Enterprise Solution Security BlackBerry encryption keys 9 Protocol Description initial key establishment protocol • The BlackBerry Enter