Article

Contents:

• Introduction
• Architecture
• Supported Devices
• Supported Networks
• System Requirements and Compatibility
• AES and Triple DES Encryption
• NotifyLink Enterprise Edition GroupWise Version Encryption

Introduction

Today, organizations need an effective way to provide secure wireless access and management of Email, Calendar, Contacts, and Tasks (PIM) to their increasingly mobile workforce. As organizations evaluate solutions, they are faced with several key challenges. One challenge is selecting the appropriate wireless device(s) best suited to their needs. Another challenge is selecting the appropriate wireless network(s) that will provide the best coverage and support for their organizational requirements. A third key challenge is tying the devices and network coverage together with a secure, easy to manage enterprise solution. Most organizations desire a single enterprise solution that will offer them support for a variety of wireless devices and also be network independent to provide the flexibility to change devices or networks over time as technology improves. Many organizations have expanded their requirements for enterprise solutions to encompass both mobile wireless on voice and data networks as well as fixed wireless supporting all versions of 802.11x networks.

Notify Technology has designed the NotifyLink Enterprise Mobility Solution as a means to provide wireless access and management of Email and PIM information suitable for any size organization. Notify's Enterprise solution can integrate seamlessly into an organization's existing network while offering the broadest possible wireless device support of almost any enterprise solution on the market today.

The NotifyLink Enterprise Mobility Solution interfaces with Novell GroupWise providing secure, real-time synchronized Email and PIM to and from a variety of wireless devices including The Apple iPhone, Palm, Blackberry, *Symbian and Windows Mobile based handhelds.

The NotifyLink solution is ideal for companies requiring real-time "Push" notification and "Over-the-Air" synchronization of their Novell GroupWise Email, Calendar, Contacts, and Tasks. It provides users with the ability to compose, reply, forward, and delete email as well as maintain constant synchronization between the wireless device and Novell GroupWise Calendar, Contacts, and Tasks wireless device and base databases.

Architecture

The NotifyLink Enterprise Edition Architecture was developed to provide real-time wireless email notification with end-to-end encryption from safely behind the corporate firewall. With NotifyLink's "Push Notification", users are assured they have the most up-to-date email on their wireless device. The NotifyLink Enterprise Server continually checks users' email accounts for new email messages. As new email is detected, NotifyLink will verify, using the user's "blocked list" and filter criteria that the email should be forwarded to the wireless device. If all the criteria are met, NotifyLink will generate a wireless notification employing the user'smessage notification format. Once the notification has been created, NotifyLink will send the email through the wireless network to the wireless device. When an email is originated, replied to, or forwarded from the wireless device, a copy of that email will appear in the users base email account "sent items" folder, which resides on the corporate email server. In addition, when an email is sent from the wireless device, the email will appear to the recipient as if it were sent from the users regular email account and not the wireless 2-way device.

Supported Devices

RIM / Blackberry

• GPRS Device Models: 7100g, 7100t, 7100r, 7100v, 7100x, 7105t, 7130c, 7130g, 7130v, 7210, 7230, 7280, 7290, 7730, 7780, 8100, 8300, 8310, 8320, 8700c, 8700f, 8700g, 8700r, 8700v, 8705g, 8707g, 8707v, 8800, 8820
• IDEN Device Models: 7100i, 7510, 7520
• CDMA Device Models: 7130e, 7250, 8130, 8330, 8703e, 8830

  Important Note: The NotifyLink BlackBerry Client version 4.0.0 is the last version of Notifylink that was fully tested for the following devices, however NotifyLink Technical Support will still provide assistance for these devices in newer NotifyLink Enterprise Server versions:

• 7750
• Non-color devices 6210, 6220, 6230, 6280, 6710(16MB), 6720(16MB)

Windows Mobile Devices

Supported Devices
Most devices running Windows Mobile 5/6 are supported. The listed devices
are the Windows Mobile 5/6 devices that have been tested by Notify Technology.
Upgrading from Windows Mobile 5 to Windows Mobile 6 is not possible on all models.
Check with your carrier or manufacturer to determineif there is an upgrade for your device model.

Smartphones:

• Cingular 2125
• Cingular 3125
• Cingular BlackJack
• Motorola Q
• Motorola Q Black
• TMobile Dash
• TMobile SDA
• TMobile Dash (WM6)

  Windows Mobile:

• Alltel PPC 6700
• Cingular 8125
• Cingular 8525
• Cingular HP IPAQ 6925
• HP IPAQ 2790
• Palm Treo 700wx
• Palm Treo 750
• Palm Treo 750 (WM6)
• Palm Treo 800w (WM6.1)
• Sprint Mogul 6800 (WM6)
• Sprint PPC 6700
• T-Mobile MDA (US English OS)
• T-Mobile MDA (German OS)

  Palm Devices

• Palm Centro
• Palm Treo 755p
• Palm Treo 700p
• Palm Treo 680
• Palm Treo 650
• Palm Treo 600
• Palm Tungsten C

  Other Palm OS 5 based handhelds with a wireless data connection (802.11b)
  Any other wired only Palm OS Based device handheld running Palm OS 5 and above with at least 32 MB of RAM

  *Symbian Devices

• Nokia E61
• Nokia E61i
• Nokia E62
• Nokia E65
• Nokia E90
• Nokia N95
• Nokia 6120c

Supported Networks

• GSM/GPRS/EDGE
• CDMA/1XRTT/EVDO
  and 802.11x

System Requirements and Compatibility

System Requirements

The NotifyLink Enterprise Server for Novell GroupWise requires three components to be installed - the SQL Database, Web Server and Messaging Server. Requirements will vary depending on the component being installed. With NotifyLink’s flexible
architecture, these components may be installed to one server or may be distributed across multiple Servers.
The components and their respective requirements are as follows:
• Supports Novell Groupwise: 6.5 (SP1-SP5), and 7.1.
• Microsoft Windows 2000/2003 Server, Support for 32 &64Bit Processors
• Support for Virtualization
• Intel Pentium 4 processor or better
• 2GB RAM
• 10GB free hard drive space
• Microsoft SQL Server 7.0 or later (SQL Server 2005 Express may be used for smaller deployments)
• Microsoft Internet Explorer 4 or later
• APACHE HTTP Server version 1.3.x or 2.x or Microsoft IIS 4 or later
• Port 80 inbound/outbound open

  PIM Requirement: To use PIM functionality with a GroupWise Mail Server, the GroupWise Mail Client must be installed to the same server where the Messaging Components will be installed. This allows files installed with the GroupWise Mail Client to enable the Enterprise Server to access PIM items.

Enterprise Components

• Messaging Engine
• Database
• Web Interface
• Device Client

Supports:

• Novell GroupWise 7.1
• Novell GroupWise 6.5
• Novell GroupWise 6.0

AES and Triple DES Encryption

The NotifyLink Enterprise Edition, GroupWise Version, supports both Triple DES and the latest Advanced Encryption Standard (AES). AES is a Federal Information Processing Standard (FIPS) (specifically, FIPS Publication 197), that specifies a cryptographic algorithm for use by U.S. Government organizations to protect sensitive, unclassified information. NIST anticipates that AES will be widely used on a voluntary basis by organizations, institutions, and individuals outside of the U.S. Government and outside of the United States, in some cases. The Secretary of Commerce approved the adoption of AES as an official Government standard, effective May 26, 2002. Specifically, AES appears to consistently be a very good performer in both hardware and software across a wide range of computing environments regardless of its use in feedback or non-feedback modes. Its key setup time is excellent, and its key agility is good. AES's very low memory requirements make it very well suited for restricted-space environments in which it also demonstrates excellent performance. Its operations are among the easiest to defend against power and timing attacks. The AES key size is 192 and 256 bits. In decimal terms, this means that there are approximately 6.2 x 1057 possible 192-bit keys. Many security systems will almost certainly use both Triple DES and AES for the next five years, at least. After that, AES may supplant Triple DES as the default algorithm on most systems. Triple DES takes three 64-bit keys, for an overall key length of 192 bits.

NotifyLink Enterprise Edition GroupWise Version Encryption

The NotifyLink Enterprise Edition, GroupWise Version, was designed to ensure that information sent over the wireless network is secure. Email sent from the wireless 2-way device to the NotifyLink Server is encrypted using AES or Triple DES algorithm. Both algorithms are time-tested encryption algorithms favored by many companies. Security is derived from an encryption key shared by the wireless device and the NotifyLink Server. The key used by the wireless 2-way device is generated on the NotifyLink Server by extracting random information from mouse movements and then hashing the collected random bits. The key is then encrypted and sent to the wireless 2-way device. For additional security, if the user wishes to create their own key via the NotifyLink Server and on their wireless 2-way device, they may do so. This exchange can be done one or more times at the discretion of the user. The advantage of this symmetric key encryption system using a secure key exchange is that the encrypted email exchanged between the wireless 2-way device and the NotifyLink Server is guaranteed to be confidential and authenticated since it comes from a source holding the shared key.

Once this key has been generated, a copy of it is stored on both the NotifyLink Server and on the wireless 2-way device. For messaging to occur, these keys must match at both the NotifyLink Server and the wireless 2-way device. In the NotifyLink solution, information transferred between the wireless 2-way device and the NotifyLink Server is never decrypted at any intermediate point. This means that only the NotifyLink Server and wireless device users have access to the information transmitted between them. In particular, it means that the service provider does not have access to any potentially sensitive company information.

Additional Information

For more information please visit: http://www.notifycorp.com