The process of receiving encrypted e-mails can be illustrated as follows.
Person A, who has the public key of B installed in his e-mail application, sends an encrypted e-mail with an attachment to user B.
The encrypted e-mail is sent through the Internet to the corporate collaboration system of DME user B.
DME sends a notification to user B's device that a new e-mail has arrived.
When user B synchronizes his DME client, the DME server will check if the private key of user B has been installed on the server (using myDME or otherwise). If not, B receives a message that the encrypted message could not be decrypted.
If the private key exists, the message is decrypted on the DME server, and the message (without attachments) is transferred to B using the secure SSL connection. B can download the attachment separately (this would not be possible if the message had to be decrypted on the client).