How The Blackberry Enterprise Server And The Blackberry Infrastructure Handle Undeliverable Messages; Blackberry Router Protocol Authentication - Blackberry ENTERPRISE SOLUTION SECURITY - ENTERPRISE SOLUTION - SECURITY TECHNICAL Overview

BlackBerry Enterprise Solution
Step Action
6 The BlackBerry Infrastructure
sends an acceptance to the
BlackBerry Enterprise Server.
How the BlackBerry Enterprise Server and the BlackBerry Infrastructure handle
undeliverable messages
When a party sends a message to a BlackBerry device, the BlackBerry Infrastructure might not be able to deliver
the message to the BlackBerry device immediately in the following scenarios:
Scenario
The BlackBerry device state prevents
the BlackBerry device from sending
and receiving messages over the
wireless network. The BlackBerry
device user might change the
BlackBerry device state by moving in
and out of wireless coverage or turning
the BlackBerry device on and off,
preventing message delivery.
The connection between the
BlackBerry Enterprise Server and the
BlackBerry Infrastructure terminates.

BlackBerry Router protocol authentication

The BlackBerry Router is designed to bypass the SRP authenticated connection to the BlackBerry Infrastructure
to route data to BlackBerry devices that are connected to the BlackBerry Device Manager through a physical
connection to a computer or BlackBerry devices that are connected over port 4101 to an enterprise Wi-Fi
network. Data that BlackBerry devices and the BlackBerry Router send between one another is compressed and
encrypted.
The system administrator can install the BlackBerry Router on a remote computer to route data traffic between
the BlackBerry Infrastructure and one or more BlackBerry Enterprise Servers. The BlackBerry device must
authenticate itself to the BlackBerry Enterprise Server to prove that it knows the master encryption key before
the BlackBerry Router sends data to the BlackBerry device. The BlackBerry Enterprise Server and the BlackBerry
device use the BlackBerry Router protocol to open a mutually authenticated connection between them.
www.blackberry.com
Description
When the BlackBerry Infrastructure accepts the challenge
response, it sends a final confirmation to the BlackBerry Enterprise
Server to complete the authentication process and set up an
authenticated SRP connection between the BlackBerry
Infrastructure and the BlackBerry Enterprise Server. If the
BlackBerry Infrastructure rejects the response, the connection fails
and SRP closes the authentication session.
Result
•
The message expires if the message remains undelivered after
the timeout value set on the BlackBerry Infrastructure (7 days)
elapses or the connection to the BlackBerry Enterprise Server
is lost. The BlackBerry Infrastructure informs the source that
the message could not be delivered.
•
If the BlackBerry Infrastructure receives a message to a
BlackBerry device that it cannot deliver after trying for 10
minutes, the BlackBerry Infrastructure informs the BlackBerry
Enterprise Server and deletes the message.
•
The BlackBerry Enterprise Server requests notification from
the BlackBerry Infrastructure of when the BlackBerry device
changes state. When the BlackBerry device state indicates
that it can send and receive messages over the wireless
network, the BlackBerry Infrastructure notifies the BlackBerry
Enterprise Server and the BlackBerry Enterprise Server sends
any pending messages to the BlackBerry device.
•
The BlackBerry Infrastructure informs the source BlackBerry
device that the message could not be delivered and deletes
the message after trying for 10 minutes.
•
When the connection is re-established, the BlackBerry
Enterprise Server resends the undelivered message to the
recipient BlackBerry device. If more than five messages are
pending, the BlackBerry Enterprise Server stores them in the
BlackBerry Configuration Database.
38