NSS offers an innovative range of security products for both personal and corporate users in every major market segment.
Our products address the following security and network management areas:
Mobile Communications:
Xecure Message Service, (XMS) is the backbone technology developed by NSS to enable end-to-end security in mobile text messaging. It ensures text messages in transmission and at rest are protected hence offering complete privacy with high-level of security for both businesses and personal. Most importantly, XMS is to breach security barrier that deters the adoption of mobile commerce in the commercial arena. Buy online!
Virtual Private Networking:
The Rock VPN product range works seamlessly with other network security technologies such as fire-walling, content scanning, anti-spam solutions, anti-virus scanners, intrusion detection/prevention systems and other appropriate technologies.


CellSniper traces any new number that might be used on your handset. When a new SIM card is installed, alert messages are
sent to predefined numbers entered by you,notifying them that your handset is in use with a new number. The alert message
will also recover your IMEI number for validation.
CellSniper can remotely delete all personal information on the phone via SMS using a WIPE string that you control. Even if the
handset is operating on a new number, you only need to send the WIPE string in a message to the new number. The WIPE string
is configured by the owner and can be edited or changed when required.
In most theft cases, an unauthorized person will switch OFF the handset immediately and/or will replace the SIM card in the
handset. When the mobile is switched ON, the phone is automatically locked by CellSniper. The phone can only be unlocked
with a password that was set by the owner. This is the first step in protecting your information. The phone can also be locked remotely by sending an SMS using the CellSniper password.
When a SIM Card other than the one CellSniper has been downloaded for is used in the handset and the mobile is switched ON, CellSniper sends alert messages (shown below) to two pre-designated numbers entered by the owner. These stealth messages
alert the owner about the new number operating on his handset.

To remotely delete all your data, all you need to do is send an SMS from any mobile phone to the number that is currently active
on your handset.The SMS is sent in a format called WIPE String set by the owner of the handset when configuring CellSniper on
the handset. Once the mobile receives this SMS, it automatically deletes all personal data, i.e. contacts, SMS, MMS, images,
videos and all data in the external memory card.
CellSniper can remotely delete the following data:-
Nobody should read you SMS without your permission! It's just a matter of personal privacy.
You can't stop others from peeking into your Inbox, but you can now TAKE CONTROL with PrivateXMS.
PrivateXMS is mobile application based on XMS Technology [Click here to find out more about XMS].

Xecure Message Service (XMS) is the backbone technology developed by NSS to enable end-to-end security in mobile text messaging. It ensures text messages in transmission and at rest are protected hence offering complete privacy with high-level of security for both businesses and personal.
XMS Technology
As a NSS proprietary application, XMS is arguably the first end-to-end secure SMS solution. It is essentially an Advanced Encryption Standard (AES) based encryption solution that works on public-private keys generated by Elliptical Curve Cryptography (ECC) whose key strengths can be selected as 128 bits, 192 bits or 256 bits.
XMS involves key pairing between users (peer-to-peer mode) or between customer and server, ensuring a secure pairing between any two persons or a person and a server. The Application on the phone is password protected and set by the user during installation, messages are encrypted and signed in the mobile handset and decrypted only at the point of termination (a recipient's mobile handset or server). Thus data at rest, as well as in transit remains encrypted.
XMS rides on the SMS protocol, using a mature, popular technology in a new and innovative business workflow. XMS assures the following:
XMS has bridged the only problem area of the workhorse SMS, by providing it business-ready security features. While GPRS and WAP are emerging technologies that will provide impetus to m Commerce, SMS was not considered as part of the business opportunity thus far by financial services other than for non personal notifications because of its security vulnerabilities.
The XMS application can be downloaded over the air (WAP push) or sent via email to a recipient who can then transfer it to his mobile phone via Blue tooth or IR. The application is light by itself, between 140 -180 KB. Once installed, the user is prompted to enter his password for the application, it generates automatically the user's key pair (private and public keys) public keys are exchanged with the peer group and the person is ready to send out private text. The user interface (UI) is easy and intuitive, and the encrypting is done at the backend, so user experience is good.
Over 70% - 75% smart-phones in the market which are JAVA MIDP 2.0 and Symbian are compatible for XMS. We are looking at a potentially huge market. The application distribution and function is independent of Telco and service providers, which minimise third party dependencies.
If your local telco is not offering XMS as yet, BUY ONLINE NOW!
The mobile phone today is being adopted in diverse and innovative ways to enhance business productivity, hence SMS is playing a leading role in this adoption.
80% of the 1 billion mobile users worldwide do not leave home without their phones as the desire to communicate more easily and have more timely access to information is universal. Mobile use is soaring as businesses increasingly turn to the mobile phone to get the message across" anywhere, anytime.
Besides social communications, SMS Messaging is increasingly being used as an alternative channel to send and deliver information instantaneously:-
XMS technology provides Digital signatures built into the product to enable Government officials or business users to trust the source of their SMS messages, while strong hashing algorithms preserve the integrity of the data contained in the SMS message. Other features include:
NSS currently offers a number of enterprise-level XMS solutions:
XMS Mobile is a J2Me and Symbian based software that allows mobile users to protect their text messages both on the phone as well as in transit across mobile networks.
XMS for Service Providers
XMS Enterprise Server (Telco) runs on Java (1.4.X and onwards) enabled web servers, which can be deployed on any platform (Windows NT 4.0, 2000, XP platforms, Linux, FreeBSD etc.). Please refer to technical specification for details.
XMS Enterprise Server (Telco) comprises a licensed application which allows the service provider to:
XMS Revenue Potential
XMS Manager is a web based management interface that enables one to issue installable XMS Mobile messaging applications to the employees within the organisation. It provides a truly autonomous and scalable means of rolling out XMS applications to a selected user group with no dependence on cellular / SMS service providers.
Using the XMS manager, businesses ranging from SMEs to large enterprises or government entities can autonomously manage and issue XMS Mobile applications to their employees across locations worldwide and begin to use the SMS medium for secure business communications.
By retaining ownership of XMS Manager, it is not necessary for organizations to share the name or mobile phone number of the end user with a cellular provider or other external providers of XMS technology. Hence, the complete privacy and control in deployment of the XMS solution, enabling protection against industrial espionage.


Benefits:
Enables a more secure SMS communications within which include but not limited to:-
XMS Messaging Centre is a separately licensed software that is intended for use by designated end users who would like to extend mobile communication to a desktop / laptop while maintaining a high level of security and trust.
What is XMS Messaging Centre for?
BENEFITS:
Through the use of XMS technology NSS has created a number of solutions specifically tailored for banks and other financial institutions to implement safe, secure and trusted transactions for mobile banking (m-banking) or mobile commerce (m-commerce) initiatives.
Security management of wireless-based technology solutions, although similar to other electronic delivery channels, involves unique challenges created by the current state of wireless services and wireless devices.
Financial institutions in particular must comply with regulatory requirements and industry best practices in order to:
To complish these requirements all XMS financial products feature two-factor authentication, a pre-requisite for most financial transactions, through:
What you have: A registered handset with the XMS application.
What you know: M-PIN registered with the bank or credit card issuer.
Additional security features for our Banking Solutions also include:
NSS currently offers two XMS financial solutions - please select the relevant links to learn more about them:
XMS Mobile Banking creates a new secure channel for interaction between a bank and its customers. A Java based application installed on the phone uses digitally signed and encrypted messages for notifications, account access, funds transfers and mobile based payments.
The XMS Anti Identity Theft solution builds upon the XMS Mobile and XMS Mobile Banking solutions by allowing banks and credit card issuers to securely implement personal two-way authentication of credit card transactions with their customers in a real-time environment.
The XMS Mobile Anti Identity Theft Solution builds upon the XMS Mobile and XMS Mobile Banking solutions that allow banks and credit card issuers to securely implement personal two-way authentication of credit card transactions in a real-time environment.
Upon usage of a credit card (either online or offline) a secure automated XMS message containing a description, location, time, and amount will be immediately received by the registered phone number of the user from the XMS Server located at the bank or credit card issuer. If the user confirms the purchase, the payment will go through.
If it is denied then payment will not take place and a caution 'flag' will automatically be placed on the user's credit card and normal investigation procedures would commence, which can go a long way in preventing credit card fraud and mitigating online risks such as phishing or identity theft.
Benefits:
XMS technology is an easy-to-use mobile solution that rides over the widely available SMS based infrastructure. It uses the industry-standard AES encryption algorithm that ensures confidentiality.
XMS Mobile Banking creates a new secure channel for interaction between a bank and its customers. Digitally signed and encrypted messages are used for notifications, account access, funds transfers and mobile based payments. Like ATM operations, XMS Mobile Banking is based on two-factor authentication that meets bank security requirements. XMS Mobile Banking is a virtual ATM on mobile handsets.
Mobile Banking Services
Funds Transfers: Perform funds transfers within the same bank as well as third party banks that are within the existing inter bank settlement environment.
Payments: Pay utility bills, loans and credit card bills from mobile handsets.
Notification & Queries: Sign up for notification on account balance and event updates, access account and other services such as cheque book request, statement request etc. Services can be custom-designed.
How Does It Work?
Benefits For Banks
Maximum Security And Assurance
User Benefits
Besides being a personal communication tool, mobile phones are being used in innovative ways to enhance business productivity and SMS is playing a leading role in this adoption. However communication of plain text SMS over existing GSM specifications make it vulnerable for any sort of classified information exchange or privacy of content. XMS Mobile is a powerful solution for plugging all gaps in security and trust for SMS messages.
With the widespread acceptance of SMS as a low cost and effective means of mobile communication, the XMS Mobile product is a powerful solution for plugging all gaps in security and trust for SMS messages and is an end-to-end solution for addressing known vulnerabilities of SMS technology, namely: Spoofing, Snooping, Sniffing and interception.
XMS Mobile runs as a service to perform security operations (encryption, signing, etc.) on messages using internationally accepted standards. Smart phones and JAVA MIDP 2.0 handsets can send and receive secure and trusted messages to any host (Server) that is built on XMS Enterprise Server components.
All that it takes to start using XMS are four easy steps:
Step 2: Install XMS Mobile
Step 4: Initiate PairMe key swap
(with the person you wish to communicate with)
Step 4: Send XMS messages securely
What is XMS?
Xecure Message Service (XMS) is the name of the technology behind our mobile software that enables end-to-end security and trust in mobile messaging. It encrypts and decrypts your mobile messages as well as provides the trust elements of confidentiality, integrity, non repudiation and authentication to your mobile messages.
Why do I need security and trust for my SMSes?
Currently mobile messages can easily be intercepted and read or altered by hackers and business competitors. There is no assurance of privacy nor can the medium be used to conduct business/financial transactions. PrivateXMS provides end to end security in mobile messaging via authentication, key management and encryption.
What is PrivateXMS?
PrivateXMS is the name of the P2P (Peer to Peer) XMS software that can be downloaded from the web and sits on your mobile handset to enable end to end security and trust in mobile messaging with the people you are communicating with.
Where can I get PrivateXMS?
You can get it from our online PrivateXMS Webstore www.privatexms.com
Do both individuals need PrivateXMS in order to communicate securely?
Yes. Both individuals need to have the application on their phones so that they can send and receive messages securely.
How does PrivateXMS work?
Before you can start using PrivateXMS, the software must be installed on both phones followed by a pairing process.
On sending your first XMS message to another person, a pairing process under the option called “PairMe” will take place. This is normal for PKI based encryption technology.
In essence, when you install XMS on your phone, two keys are generated. One key is kept secret on you phone and is called the Private key. Another key is sent out to other people and is called the Public Key. Only the Public Key can encrypt / decrypt messages by the Private Key. Thus, if you have somebody else's public key, you can send a message that only they can decrypt with their private key. This is why you have to 'pair up' via PrivateXMS's PairMe function before sending any PrivateXMS messages. Each contact only need to be paired once. Is
PrivateXMS bound to my handset or my phone number?
PrivateXMS uses phone number as unique identification to establish the security and trust channel and not the handphone.
Does PrivateXMS protect my messages while they are inside my mobile handset as well?
Yes, PrivateXMS offers complete security and trust for end to end message communication both 'at rest' (in your mobile handset) and 'over the air' (when the message is being sent).
XMS messages that you have written or received remain encrypted at all times and only accessible with the password that only you are aware of.
Should there be interception or spoofing, the messages will remain encrypted hence there is no compromise.
Is PrivateXMS supported by most of the handphone models?
At the moment, most Symbian Series 60, UIQ, and Java enabled (MIDP 2.0) can run PrivateXMS. More handsets are continuously being added while other mobile OS platforms will be made available in the near future. Please visit our www.privatexms.com for updated list of all compatible handsets.
I have a PrivateXMS supported handset and it is also a 3G phone, will PrivateXMS run properly?
Yes, PrivateXMS is supported on most 3G phones as long as the SMS protocol is supported by a compatible handset.
Can I use PrivateXMS across any service providers?
Yes. PrivateXMS messages are always considered as a normal SMS when they are sent through all telecommunication networks. It ensures mobile security and helps keep the contents of private and sensitive SMS messages confidential across different cellular providers and diverse technologies (GSM, CDMA etc.).
Can I send PrivateXMS messages to international number?
Yes. You only need to save your contacts’ number in an international format.
Do I have to pay extra for sending PrivateXMS instead of SMS?
No, PrivateXMS messages actually ride on the existing SMS platform. You will be charged the standard SMS cost; there are no additional fees besides the monthly license fee.
Can I send secure MMS messages?
The current version of PrivateXMS does not encrypt MMS messages. In the future releases, this feature will be supported and allow you to send secure MMS messages using PrivateXMS.
Please find here full documentation for the full XMS product suite including XMS Mobile, XMS Enterprise and XMS Banking Solutions.
XMS Mobile
XMS Enterprise
XMS Mobile Banking
XMS Anti Identity Theft Solutions White Paper
Communications are essential for operations. Securing the communication channels is crucial. The vulnerability of GSM Network is such that voice calls can be intercepted, messages can be captured and read, devices can be misplaced or stolen rendering valuable data to be vulnerable. Contacts, SMS, MMS messages, private or confidential files on memory card, personal pictures and video clips are potential sources of privacy / confidentiality breach for individual and enterprises.
Xecure Phone provides feature rich productivity of today’s popular Nokia business phones combined with military grade security over Voice and SMS messaging. To prevent confidential / private data on the phone from falling into the wrong hands, Xecure Phone is equipped with the capability of tracing the lost phone, locking the unauthorized user out and deleting confidential data remotely through a user initiated SMS.
Xecure Phone is bundled with 3 cutting edge security components:-
Xecure Phone uses state-of-the-art technology for voice encryption & offers encrypted voice communications over GPRS / EDGE / 3G. It secures your mobile communication against tapping attacks and minitoring by third parties.
XMS enabled mobile handsets can send and receive secure and trusted messages between handsets. Secure message exchange is made possible by using authentication, key management and encryption.
Individuals can exchange private information with friends, family and associates. Businesses can protect against industrial espionage & prevent information leakage by using XMS for business communications and securing data on the handset.
CellSniper protects the data on phones which have been misplaced, stolen or lost. It automatically locks the handset when it is re-activated after it is switched off by an illegitimate user. The handset can only be unlocked for use by a password which was earlier set by the original owner.
CellSniper can also detect the number of the illegitimate SIM that replaces the original SIM in the handset, which will then alert a pre-designated number via SMS so that the owner can be informed. With the unauthorized user’s number know to the owner, all confidential data can be remotely deleted via a SMS from any phone. This deletion SMS follow a format that is preset by the owner (called WIPE string).
The list of compatible phones are as below:-
Nokia
E61i, E61, E65, E90, N73, N75, N80, N95
The Rock VPN product range can be used to provide a wide variety of secure network solutions. It works seamlessly with other network security technologies and includes support for custom algorithms and custom signatures.
Rock is capable of securing all your information traveling over the Intranet or the Internet. Making use of the widely respected IPSec protocol, Rock authenticates users, servers and gateways to one another, encrypting all communication flowing between participating parties. The Rock product suite contains both software and VPN hardware appliance models dedicated to secure all your IP-based communications.
They work in tandem to provide secure end-to-end communication over IP networks. Rock allows you to add your own encryption algorithms as well as additional security layers through the use of APIs that bind and integrate security into the application layers. In addition to providing flexibility in operation, Rock VPN offers a coherent centralised management system that is able to build VPN policies for the operation of different VPN modes.
For more information on Rock VPN you can visit the Rock VPN site at: