Tablet Security Features - Blackberry PlayBook Security Technical Overview

Security Technical Overview

Tablet security features

Feature
Encrypted and authenticated
connection between a BlackBerry
PlayBook tablet and BlackBerry
smartphone
Protection of work data on a tablet
Protection of BlackBerry PlayBook
tablet user information
Protection of BlackBerry Tablet OS
Protection of the user spaces that
applications run in
Protection of resources
Management of permissions to
access capabilities
Verification of the boot ROM code
6
Description
• A tablet and smartphone perform two pairing processes to open an
encrypted and authenticated connection between each other: a
Bluetooth pairing process and a BlackBerry Bridge pairing process that
is designed to enhance the level of encryption for the connection.
• The BlackBerry Bridge uses the ECDH algorithm to negotiate a key and
AES-256 to encrypt the connection.
• The tablet is designed to isolate the work file system and work
applications from the personal file system and personal applications.
• The tablet classifies applications as work applications and allows them
to access work data.
• The tablet helps protect work data using XTS-AES-256 encryption.
• The tablet does not store local copies of work data permanently, the
tablet uses the BlackBerry smartphone file system to store work data.
The tablet is designed to allow a user to delete all user information and
application data from the tablet memory.
• When the BlackBerry Tablet OS starts, it completes integrity tests to
detect damage to the kernel.
• The BlackBerry Tablet OS can restart a process that stops responding
without negatively affecting other processes.
• The BlackBerry Tablet OS validates requests that applications make for
resources on the tablet.
The BlackBerry Tablet OS runs each process in a user space on the tablet.
To help protect a user space, the BlackBerry Tablet OS is designed to
evaluate the requests that processes make for memory outside of the user
space. The BlackBerry Tablet OS is designed to permit a process to access
only the memory that it has permissions for at a specific time.
The BlackBerry Tablet OS uses adaptive partitioning to allocate resources
that are not used by applications during typical operating conditions and to
make sure that resources are available to applications during times of peak
operating conditions.
The BlackBerry Tablet OS evaluates every request that an application makes
to access a capability on the tablet.
The tablet verifies that the boot ROM code is permitted to run on the tablet.
Tablet security features
2