Diversinet's Passport Certificate Server Software Receives World's First Wireless PKI Security Common Criteria Certification.

Business Editors

OTTAWA--(BUSINESS WIRE)--May 13, 2002

Diversinet(NASDAQ:DVNT)--

First PKI Product Evaluated and Certified in North America 

3rd International Common Criteria Conference - May 13, 2002 - Diversinet Corp. (NASDAQ Small Cap:DVNT), a leading provider of mobile commerce (m-commerce) security infrastructure solutions, today announced that its Passport Certificate Server(R) Version 4.1.1 has become the world's first wireless public key infrastructure (PKI) security product to receive the Common Criteria for Information Technology Security Evaluation (Common Criteria) certification.

Awarded today at the 3rd International Common Criteria Conference in Ottawa, Canada, Diversinet received Common Criteria (ISO 15408-3) certification for its Passport Certificate Server Version 4.1.1. Diversinet's Passport Certificate Server Version 4.1.1. met all evaluation and validation criteria outlined in the Evaluation Assurance Level 2+ asserting that the product satisfies its security requirements. Additionally, an Informal Security Policy Model was produced to ensure that the product properly enforces its stated policies.

Common Criteria, a rigorous international security standard recognized by 14 countries, is an international standard to evaluate the trustworthiness of Information Technology products and systems. The evaluation was conducted at the DOMUS IT Security Laboratory, a unit of IBM Canada Limited, and was overseen by the Communications Security Establishment (CSE), a division of the Canadian Department of National Defence. This is the first PKI Product (wireline or wireless) to be evaluated and certified under the Common Criteria in North America.

The Yankee Group's Corporate Wireless Survey 2002 reveals that security continues to be the top inhibitor of wireless enterprise deployments. "Mobile commerce will not reach its full potential until businesses and consumers gain confidence in conducting transactions and transmitting sensitive data over wireless networks," said Adam Zawel, Wireless/Mobile Enterprise & Commerce Director, Yankee Group. "Highly accredited wireless security solutions help to give confidence to enterprises looking to deploy secure wireless applications."

The Common Criteria certification confirms that Diversinet's Passport Certificate Server product has been verified and tested by a third party, and is in compliance with strict security requirements. Common Criteria accreditation is required by many government agencies, the financial industry, and by many corporations. "The use of Common Criteria approved products is required by the US government and strongly recommended by the Canadian government for systems that utilize IT security elements," said Laurie Mack, Director, DOMUS IT Security Laboratory. "By having the first and only wireless PKI product certified by Common Criteria, Diversinet will be able to meet the stringent security requirements of mission-critical wireless applications for the government."

"Diversinet is committed to meeting, and exceeding, the highest security standards for wireless PKI. By successfully completing the Common Criteria evaluation, Diversinet's Passport Certificate Server has undergone the most stringent security assessment of any wireless PKI product on the market," said Hussam Mahgoub, Vice President Products, Diversinet Corp. "This internationally recognized certification provides our customers with an independent assessment of the product and confidence in knowing that the product meets a high level of assurance."

Diversinet's Passport Certificate Server Version 4.1.1. is a leading wireless PKI infrastructure product, providing easy to use, reliable and scalable advanced authentication, encryption and non-repudiation safeguards in wireless data transmissions. About the Common Criteria

The Common Criteria (CC), which became ISO standard 15408 in 1999, is an alignment and development of a number of source IT security evaluation criteria including existing European (ITSEC), US (TCSEC - Orange Book) and Canadian (CTCPEC). The CC permits comparability between the results of independent security evaluations. By establishing such a common criteria base, the intent is for the results of an IT security evaluation to be meaningful to a wider audience. It does so by providing a common set of requirements for the security functions of Information Technology (IT) products and for assurance measures applied to them during a security evaluation. For additional information on Common Criteria, visit their web site at http://www.commoncriteria.org.

About Diversinet Corp.

Diversinet is a leading developer of advanced wireless security software, enabling mobile e-commerce (m-commerce) services with its wireless security infrastructure solutions. Diversinet's client/server security software facilitates digital signatures, authentication and encryption with PKI products specifically designed to perform optimally in wireless environments and devices. In October of 2001, Diversinet enabled the launch of the first public Certification Authority in the world to offer mobile individual and business digital certificates for consumer use. For more information on Diversinet, visit the company's web site at www.diversinet.com.

The Private Securities Litigation Reform Act of 1995 provides a "safe harbor" for forward-looking statements. Certain information included in this press release (as well as information included in oral statements or other written statements made or to be made by the company) contains statements that are forward-looking, such as statements relating to anticipated future revenues of the company and success of current product offerings. Such forward-looking information involves important risks and uncertainties that could significantly affect anticipated results in the future and, accordingly, such results may differ materially from those expressed in any forward-looking statements made by or on behalf of the company. For a description of additional risks and uncertainties, please refer to the company's filings with the Securities and Exchange Commission.