Process Flow: Using The Blackberry Router Protocol To Close An Authenticated Connection - Blackberry ENTERPRISE SOLUTION SECURITY - ENTERPRISE SOLUTION - SECURITY TECHNICAL Overview

BlackBerry Enterprise Solution
If the BlackBerry device calculates that y
attempt. The BlackBerry Enterprise Server and the BlackBerry device do not open an authenticated
connection between them.
If the BlackBerry Router calculates that y
connection attempt.
If the BlackBerry Enterprise Server calculates that y
the connection attempt.
20. The BlackBerry Router stores R
21. The BlackBerry Enterprise Server stores R
22. The BlackBerry Router overwrites y
23. The BlackBerry Enterprise Server overwrites y
24. The BlackBerry device overwrites y

Process flow: Using the BlackBerry Router protocol to close an authenticated connection

1. The BlackBerry Enterprise Server picks a random value r
2. The BlackBerry Enterprise Server calculates R
If R equals R , or R equals R
C B C
3. The BlackBerry Enterprise Server sends the value R
4. The BlackBerry Router performs the following calculations:
•
checks that when the value R
•
checks that when the value R
5. The BlackBerry Router picks a random value e
If e equals e , or e equals e
C D c
6. The BlackBerry Router sends the value e
7. The BlackBerry Enterprise Server performs the following calculations:
•
checks that when the value e
•
checks that when the value e
8. The BlackBerry Enterprise Server calculates y
9. The BlackBerry Enterprise Server sends the value y
If the BlackBerry Router accepts y
BlackBerry device on behalf of the BlackBerry Enterprise Server.
If the BlackBerry Router calculates that y
connection close attempt. The BlackBerry Router does not close the authenticated connection to the
BlackBerry device.
©
2009 Research In Motion Limited. All rights reserved.
≠ hP, the BlackBerry device rejects the connection
P + e R
B B B
≠ y
P + e R P + e
B B B D
P + e
D
, R , y P + e R , e , and e
D B D D D D
, R , e , e , and h.
D B D B
and y in memory with zeroes.
B D
, y , and r
B D
, y , and r in memory with zeroes.
B D D
= r P.
C C
the BlackBerry Enterprise Server calculates another R
D
to the BlackBerry Router to initiate connection closure.
C
approaches the point at infinity, the value R
C
equals R , or R equals R
C B C
, where 1 < e
C
the BlackBerry Router calculates another e
B
to the BlackBerry Enterprise Server.
C
equals 0, the value e
C
equals e , or e equals e
C B C
= h – e r
C C
to the BlackBerry Router.
C
, the BlackBerry Router closes the authenticated connection to the
C
≠ y
P + e R P +e
C C C D
www.blackberry.com
R , the BlackBerry Router rejects the
D D
≠ hP, the BlackBerry Enterprise Server rejects
R
D D
.
B
in memory with zeroes.
B
, where 1 < r < p – 1.
C c
is random
C
, the value R is random
D C
< p – 1.
c
value.
C
is random
C
, the value e is random
D C
mod p.
C
R , the BlackBerry Router rejects the
D D
82
value.
C