BlackBerry Enterprise Solution
82
If the BlackBerry device calculates that
y
B
P
+
e
B
R
B
≠
hP
, the BlackBerry device rejects the connection
attempt. The BlackBerry Enterprise Server and the BlackBerry device do not open an authenticated
connection between them.
If the BlackBerry Router calculates that
y
B
P
+
e
B
R
B
≠
y
D
P
+
e
D
R
D
, the BlackBerry Router rejects the
connection attempt.
If the BlackBerry Enterprise Server calculates that
y
D
P
+
e
D
R
D
≠
hP
, the BlackBerry Enterprise Server rejects
the connection attempt.
20.
The BlackBerry Router stores
R
D
,
R
B
,
y
D
P
+
e
D
R
D
,
e
D
, and
e
B
.
21.
The BlackBerry Enterprise Server stores
R
D
,
R
B
,
e
D
,
e
B
, and
h
.
22.
The BlackBerry Router overwrites
y
B
and
y
D
in memory with zeroes.
23.
The BlackBerry Enterprise Server overwrites
y
B
,
y
D
, and
r
B
in memory with zeroes.
24.
The BlackBerry device overwrites
y
B
,
y
D
, and
r
D
in memory with zeroes.
Process flow: Using the BlackBerry Router protocol to close an authenticated connection
1.
The BlackBerry Enterprise Server picks a random value
r
C
, where 1 <
r
c
<
p
– 1.
2.
The BlackBerry Enterprise Server calculates
R
C
=
r
C
P
.
If
R
C
equals
R
B
, or
R
C
equals
R
D
the BlackBerry Enterprise Server calculates another
R
C
value.
3.
The BlackBerry Enterprise Server sends the value
R
C
to the BlackBerry Router to initiate connection closure.
4.
The BlackBerry Router performs the following calculations:
•
checks that when the value
R
C
approaches the point at infinity, the value
R
C
is random
•
checks that when the value
R
C
equals
R
B
, or
R
C
equals
R
D
, the value
R
C
is random
5.
The BlackBerry Router picks a random value
e
C
, where 1 <
e
c
<
p
– 1.
If
e
C
equals
e
D
, or
e
c
equals
e
B
the BlackBerry Router calculates another
e
C
value.
6.
The BlackBerry Router sends the value
e
C
to the BlackBerry Enterprise Server.
7.
The BlackBerry Enterprise Server performs the following calculations:
•
checks that when the value
e
C
equals 0, the value
e
C
is random
•
checks that when the value
e
C
equals
e
B
, or
e
C
equals
e
D
, the value
e
C
is random
8.
The BlackBerry Enterprise Server calculates
y
C
=
h
–
e
C
r
C
mod
p
.
9.
The BlackBerry Enterprise Server sends the value
y
C
to the BlackBerry Router.
If the BlackBerry Router accepts
y
C
, the BlackBerry Router closes the authenticated connection to the
BlackBerry device on behalf of the BlackBerry Enterprise Server.
If the BlackBerry Router calculates that
y
C
P
+
e
C
R
C
≠
y
D
P +e
D
R
D
, the BlackBerry Router rejects the
connection close attempt. The BlackBerry Router does not close the authenticated connection to the
BlackBerry device.
©
2009 Research In Motion Limited. All rights reserved.
www.blackberry.com