Architecture:

Persona Mobile

BlackBerry Enterprise Identity

and

BlackBerry Dynamics

apps that use the

BlackBerry Analytics SDK

send usage data, events, and location data to the

Persona

services.

The

BlackBerry Dynamics

apps released by

BlackBerry

(

BlackBerry Work

,

BlackBerry Access

, and so on) include the BlackBerry Analytics SDK.

The

Persona

services receive usage data, events, and location data from

BlackBerry Enterprise Identity

and

BlackBerry Dynamics

apps. The services process this data and use machine learning to train and develop a risk model for each user.

The services use this risk model to analyze new data that is received and to generate various risk scores for the user in real time, including a behavioral risk score, an app usage risk score, and a geozone risk score. The services communicate the user's current risk scores and the corresponding risk actions that you configure to

BlackBerry Dynamics

apps, the , and

BlackBerry UEM

.

BlackBerry Persona Analytics Portal

BlackBerry Dynamics

apps support app anomaly risk detection. If the

Persona

services receive behavioral data or app events from

BlackBerry Dynamics

apps that do not fit the user's usage model,

Persona

triggers an authentication prompt. The user must successfully authenticate if they want to continue to use the app.

You use the web-based

BlackBerry Persona Analytics Portal

to manage the service, including:

Configuring and customizing the risk engines
Defining geozones to enforce security standards for specific locations
Creating and assigning
Persona
policies that apply adaptive actions to users' devices based on each user's level of risk
Viewing user and event statistics
Identifying trends and potential security threats

The portal communicates with the

Persona

services and

UEM

to apply policies to devices.

You use the

UEM

management console to create and configure local user groups that define security standards and device behaviors for the different risk levels and defined geozones. When you create a policy in the portal, you associate each group with one or more of the behavioral risk levels, geozone risk levels, or defined geozones.

The

Persona

services communicate with

UEM

and direct it to apply risk actions (group assignments, temporary blocks of

BlackBerry Dynamics

apps) to users' devices.

You can configure

BlackBerry Enterprise Identity

authentication policies that can change a user’s authentication requirements in different risk scenarios. You can factor the user’s behavioral risk level, geozone risk level, or a defined geozone into the risk factors in an authentication policy. If the user meets a certain risk level, the policy adapts the user’s authentication requirements accordingly.