Authentication
Aside from the SSL-level authentication, the system contacts the IOT infrastructure for a token, after which the system contacts the authentication service for the OTA infrastructure. This is conducted using basic authentication plus a standard TLS 2048-bit encryption.
The authorization token takes the following format: base64(tenantid/deviceId/epochtime:password).
The result is then passed as a header, as in the following example:
Authorization: Basic dGVuYW50aWQvdXNlcm5hbWU6cGFzc3dvcmQ=
Sample request
Authentication request URL
POST https://ps.dcms.blackberry.com/dmps/authentication/4.0.0
Authorization block
TYPE: Basic Auth
UserName: tenantId/deviceid/epochtime
Password: password
Sample response
Status: 200: OK
x-status-code: 0
x-status-message: Success
x-system-authtoken: 3yXGome+pFOJhIlFjidulQEl5dinuek1YUmP8XYIhnR+3rky3g2ZwwKTHj07aPQgiLcsMSRVziexoyI28PJb
The high-level flowchat below summarizes the authentication process: