Access Rights For Work Data And Personal Data That The Blackberry Tablet Os Grants To Applications; Using The Bridge Browser - Blackberry PlayBook Security Technical Overview

Security Technical Overview
Access rights for work data and personal data that the BlackBerry Tablet
OS grants to applications
The following table displays the access rights that applications have to work data or personal data.
Access right
Access a work file
that a work
application saves
Access a personal file
that a personal
application saves
Access the private
data of Work
application A
Access the private
data of Work
application B

Using the Bridge Browser

If the Allow Browser IT policy rule is set to Yes and you configure the BlackBerry MDS Connection Service to
connect a BlackBerry smartphone to the Internet and intranet, a BlackBerry PlayBook tablet that is connected to
the smartphone can use the Bridge Browser to browse the Internet or intranet in work mode.
The Bridge Browser does not use the Wi-Fi connection to connect to the Internet or intranet. Instead, the Bridge
Browser connects to the Internet or your organization's intranet using the smartphone's connection to the
BlackBerry MDS Connection Service. The tablet encrypts any cached data that is stored on the tablet using
randomly generated file encryption keys that are encrypted using the BlackBerry Bridge work key.
A BlackBerry PlayBook tablet user can access the Bridge Browser on the tablet by clicking the Bridge Browser icon
on the BlackBerry Bridge panel. By default, when a user clicks a link in a work application (for example, a link in
work email messages, work calendar entries, the contact list, tasks, memos, or BlackBerry Messenger messages),
the tablet opens the link in personal mode using the browser. The tablet opens the link in work mode using the
Bridge Browser if any of the following conditions exist:
• The link is to an address that is not routable on the public Internet, such as a private IP address as specified in
RFC 1918 or an address that does not contain periods.
• The link is to a domain that is included in the MDS Browser Domains IT policy rule that applies to the smartphone
that the tablet is connected to.
• The Wi-Fi Internet Access Path IT policy rule that applies to the smartphone that the tablet is connected to is
set to "Access through BlackBerry MDS Connection Service".
22
How a tablet controls whether an application is a work application or a personal application
Work application
Work application A
B
Read-write access Read-write
access
Read-only Read-only
Read-write access No access
No access Read-write
access
Personal application C Personal application D
No access
Read-write access
No access
No access
No access
Read-write access
No access
No access