Controlling Location-Based Services On The Blackberry Device - Blackberry ENTERPRISE SOLUTION SECURITY - ENTERPRISE SOLUTION - SECURITY TECHNICAL Overview

BlackBerry Enterprise Solution
Using Bluetooth CHAP password authorization on the BlackBerry device
Supported Bluetooth enabled BlackBerry devices support using CHAP as described in RFC 1994. CHAP is a
protocol designed to authenticate the client using a challenge that is combined with a secret (for example, the
BlackBerry device password).
BlackBerry devices that support and are enabled to use CHAP can use it to establish a Bluetooth link to the
BlackBerry Desktop Software so that the BlackBerry device never sends its password over an unprotected
connection. BlackBerry devices and the BlackBerry Desktop Software can use CHAP to send a challenge and
subsequently use the SHA-1 algorithm to either calculate a response to the challenge or validate the response of
the other party, depending on which party initiated the Bluetooth link establishment process.

Controlling location-based services on the BlackBerry device

Third-party applications and preloaded BlackBerry applications on BlackBerry devices that support the GPS
feature can use the GPS feature by default. For example, BlackBerry® Maps is a preloaded application that uses
the GPS feature on BlackBerry devices to enable users to locate the global positions of their BlackBerry devices.
The BlackBerry Enterprise Server includes the following options to enable the BlackBerry Enterprise Server
administrator to control the GPS feature and the location-based services on supported BlackBerry devices that
use the feature.
Option
Turn off the GPS feature on BlackBerry devices.
Control use of the GPS feature by specific third-
party applications on the BlackBerry device.
Prevent the BlackBerry device from reporting its
location to the BlackBerry Enterprise Server.
www.blackberry.com
Description
The following measures prevent third-party
applications and preloaded BlackBerry applications
from accessing the global position of the BlackBerry
device:
•
The BlackBerry Enterprise Server administrator
can set the Disable GPS IT policy rule to True to
prevent the BlackBerry device from permitting
third-party applications or preloaded BlackBerry
applications from accessing the GPS feature.
•
The BlackBerry Enterprise Server administrator
can set the Device GPS application control policy
rule to Not Permitted in the default application
control policy to prevent all third-party
applications from using the GPS feature.
The BlackBerry Enterprise Server administrator can set
the Device GPS application control policy rule to Not
Permitted in a specific application control policy to
prevent specific third-party applications from using
the GPS feature.
By default, the Enable Enterprise Location Tracking IT
policy rule is set to False to prevent the BlackBerry
device from using the GPS feature to report its
location to the BlackBerry Enterprise Server at regular
intervals. The BlackBerry Enterprise Server
administrator can turn on Enterprise Location
Tracking, specify a message that the BlackBerry device
displays to notify the BlackBerry device user when
Enterprise Location Tracking is enabled, and configure
the interval after which a BlackBerry device reports its
location to the BlackBerry Enterprise Server.
57