Help Center

Local Navigation

BlackBerry Manuals & Help  >  Administrator Documentation  >  BlackBerry Enterprise Server 5 Security  >  Security Technical Overview BlackBerry Enterprise Server - 5.0.2

How the BlackBerry Attachment Service protects data on a BlackBerry device

A BlackBerry® device uses the BlackBerry Attachment Service to process an attachment in an email message or calendar entry so that the user can view the attachment on the BlackBerry device. The BlackBerry Attachment Service is designed to prevent a potentially malicious application from accessing data on the BlackBerry device by using binary format parsing to open the attachment and process it.

After the BlackBerry Attachment Service processes the attachment, the BlackBerry Router sends the attachment to the BlackBerry device for rendering. If the attachment in the email message or calendar entry is an application, the BlackBerry device does not run the application.

For more information about the attachment file formats that the BlackBerry® Enterprise Server supports, see the BlackBerry Enterprise Server Feature and Technical Overview.

Best practice: Protecting the BlackBerry Attachment Service

To help prevent the spread of potential attacks from the computer that hosts the BlackBerry® Attachment Service to other computers in your organization’s network, consider the following guidelines:
  • Install the BlackBerry Attachment Service on a computer that is separate from the computer that hosts the BlackBerry® Enterprise Server.
  • Place the computer that hosts the BlackBerry Attachment Service in its own network segment.
Next topic: How a BlackBerry device protects its operating system and the BlackBerry Device Software
Previous topic: Process flow: Generating an encryption key for a media card

Was this information helpful? Send us your comments.