Login
User Agreement & LicensingPrivacy Policy
FIPS 140-3
Common Criteria EAL5+

Products

  • ProvenHSM
  • ProvenBox
  • Native Security Applications
  • Software Developer Kit (SDK)
  • ProvenCore OS and TEE
  • ProvenVisor

Use Cases

  • Data Protection
  • PQC Migration
  • Key Management & Cloud KMS
  • Confidential Computing
  • Finance Innovation
  • Digital Signature (eIDAS 1.0)
  • Wallet & Identity (eIDAS 2.0)
  • Multi-Party Computation (MPC)
  • Enterprise PKI
  • Strengthening HPC Platforms

Resources

  • Blog and Whitepapers
  • Security and Certifications
  • Integrations

Company

  • Careers
  • About
All customer stories

Renault — Automotive

Hardening Connected Vehicle Gateways and OTA Updates

Digital Processor
Renault Logo

Company

Renault

HQ

Boulogne-Billancourt, France

Industry

Automotive

Focus

Vehicle gateways, OTA update integrity, ECU hardening

Products used

  • ProvenCore
A vehicle we ship today has to accept a security fix a decade from now. That makes the update path itself safety-relevant, so it belongs behind the same verified boundary as everything else we trust in the car.
Full nameJob title

Key outcome

A Minimal Trusted Computing Base Inside the Vehicle

A connected vehicle gateway sits between the outside world and safety-relevant systems. Reducing the amount of code that has to be trusted on that boundary — and proving the correctness of what remains — is the most direct way to shrink the attack surface.

More customer stories

Metal Processor
Bull Logo

High-performance computing

Strengthening HPC Platform Integrity with ProvenCore

Digital Cloud
OVH Cloud Logo

Cloud infrastructure

Running Sovereign Key Management on Certified Infrastructure

The challenge

Long Vehicle Lifecycles Meet Continuous Software Delivery

Vehicles stay on the road far longer than typical software support windows, while regulation increasingly requires the ability to ship security fixes over the air. The update path itself therefore becomes security-critical: it must guarantee authenticity, resist rollback and keep working across a decade of hardware revisions.

The solution

Security-Critical Paths Isolated by Design

Signature verification and update orchestration run inside ProvenCore, isolated from the general-purpose software on the same processor. Security has to be considered from the very first design choices — bolting it on at the end never works — so the isolation boundary is fixed early and stays stable as the rest of the stack evolves.

Shrinking what has to be trusted was worth more to us than any amount of hardening layered on top of it.
— Full name, Renault
Previous storyOrange
Digital Lock
Orange Logo

Telecommunications

Securing Secure Element Provisioning at Carrier Scale

Explore ProvenHSM
Bull Logo
Safran Logo
BMW Logo
DGA Logo
Atos Logo
Renault Logo
Microsoft Logo
Orange Logo
OVH Cloud Logo
ST Microelectronics Logo
Bull Logo
Safran Logo
BMW Logo
DGA Logo
Atos Logo
Renault Logo
Microsoft Logo
Orange Logo
OVH Cloud Logo
ST Microelectronics Logo
Bull Logo
Safran Logo
BMW Logo
DGA Logo
Atos Logo
Renault Logo
Microsoft Logo
Orange Logo
OVH Cloud Logo
ST Microelectronics Logo