Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 - Installationsanleitung PDF herunterladen (Seite 29)

BlackBerry Enterprise Solution Security

Protecting the BlackBerry Infrastructure connections 29

SRP action Description

exchange configuration

information between the

BlackBerry Enterprise Server

and the BlackBerry

Infrastructure

The BlackBerry Enterprise Server is designed to send a basic information

packet to the BlackBerry Infrastructure immediately following the initial

SRP authentication process. The packet format is designed to be

recognizable to both the BlackBerry Enterprise Server and the BlackBerry

Infrastructure, enabling both sides to configure the parameters of the SRP

implementation dynamically.

To support backward compatibility with older versions of the BlackBerry

Enterprise Server software, which terminate the SRP connection if they

receive unrecognized packets, the BlackBerry Infrastructure does not send

basic information packets to the BlackBerry Enterprise Server until the

BlackBerry Enterprise Server has sent a packet of the same format to the

BlackBerry Infrastructure.

send and receive transactions

between the BlackBerry

Enterprise Server and the

BlackBerry Infrastructure

If the connection between the BlackBerry Enterprise Server and the

BlackBerry Infrastructure terminates, the wireless network can queue up to

five undelivered messages for up to seven days. If there are more than five

pending messages, the BlackBerry Enterprise Server stores them in the

BlackBerry configuration database. The BlackBerry Infrastructure does not

store data to send to BlackBerry devices.

If the BlackBerry Infrastructure is not operational, the wireless network

discards the pending messages—the BlackBerry device does not receive the

message and the BlackBerry Enterprise Server does not receive an

acknowledgement packet from the recipient BlackBerry device. When the

BlackBerry Infrastructure is operational again, the BlackBerry Enterprise

Server resends messages for which it did not receive an acknowledgement

packet from a recipient.

SRP authentication process

Step Action Description

1 The BlackBerry Enterprise

Server sends its SRP ID, or UID,

to the BlackBerry

Infrastructure.

The BlackBerry Enterprise Server sends a packet to the BlackBerry

Infrastructure to claim its own UID.

2 The BlackBerry Infrastructure

sends a challenge string to the

BlackBerry Enterprise Server.

The BlackBerry Infrastructure sends a random challenge string to

the BlackBerry Enterprise Server.

3 The BlackBerry Enterprise

Server sends a challenge string

to the BlackBerry

Infrastructure.

When the BlackBerry Enterprise Server receives the BlackBerry

Infrastructure challenge string, it sends a challenge string to the

BlackBerry Infrastructure.

4 The BlackBerry Infrastructure

sends a challenge response to

the BlackBerry Enterprise

Server.

The BlackBerry Infrastructure hashes the BlackBerry Enterprise

Server challenge string with the SRP authentication key, a 20-byte

shared secret encryption key, using the keyed HMAC with SHA1.

The BlackBerry Infrastructure sends the resulting 20-byte value

back to the BlackBerry Enterprise Server.

5 The BlackBerry Enterprise

Server sends a challenge

response to the BlackBerry

Infrastructure.

The BlackBerry Enterprise Server responds to the BlackBerry

Infrastructure challenge string by hashing the challenge with the

shared SRP authentication key.

www.blackberry.com

1 2 ... 24 25 26 27 28 29 30 31 32 33 34 ... 51 52

Kommentare zu diesen Handbüchern

Keine Kommentare

Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 - Installationsanleitung Seite 29

Kommentare zu diesen Handbüchern

Verwandte Produkte und Handbücher für Software Blackberry S-MIME SUPPORT PACKAGE VERSION 4.1 -