Airbus has secured a 25-year French defence cybersecurity contract covering the design, development, production, certification, and operational maintenance of secure gateways used to exchange information between military networks with different classification levels.
The French General Directorate for Armament awarded the PARACOM programme to Airbus Cybersecurity following a competitive tender. The systems will be deployed across the Ministry of the Armed Forces and Veterans’ Affairs, covering fixed information infrastructure as well as equipment used directly with military platforms and command organisations.
PARACOM is intended to support filtered exchanges between networks ranging from secret to unclassified. The gateways will control how information moves across those boundaries, applying security policies where the transmitting and receiving systems do not operate at the same level of sensitivity.
Several hardware configurations are planned. Some gateways will be integrated into data centre racks, while self-contained versions will be available for command posts and other deployed environments. Airbus said the same family is also being designed for constrained tactical installations aboard surface vessels, submarines, aircraft, helicopters, drones, armoured vehicles, and other land platforms.
François Lombard, director of Connected Intelligence at Airbus Defence and Space, said: “This gateway strengthens the digital shield the French Armed Forces rely on to execute their missions.”
France already operates Airbus gateway technology within its land forces, with the company supplying multi-level data sharing systems since 2013. PARACOM extends that activity into a programme whose duration is longer than the commercial life of many of the processors, software platforms, and communications standards likely to be used in its first generation of equipment.
That creates an engineering problem very different from supplying one fixed batch of hardware. A cybersecurity gateway has to remain supported while processors become obsolete, operating systems change, new communications interfaces appear, threats evolve, and certification requirements are revised. The product therefore needs a managed route for technology refresh rather than an assumption that the original configuration can remain untouched for a quarter of a century.
Configuration control becomes central to that task. Hardware and software revisions have to be introduced without breaking interoperability with existing platforms or undermining the assurance case on which certification depends. Vulnerabilities also need to be addressed while maintaining predictable behaviour in systems that may be deployed at sea, in the air, or with land forces.
Defence electronics makes obsolescence particularly difficult because platform lives and commercial computing cycles are badly mismatched. A ship, aircraft, or armoured vehicle can remain in service for decades, while individual processors and electronic components may be superseded within a few years. Sustaining the gateway family will therefore require planned redesign, component substitution, testing, and recertification throughout the contract.
The programme also reflects the growing amount of information moving between systems that were previously more isolated. Sensors, command networks, intelligence feeds, logistics data, platform management systems, and deployed communications increasingly need to exchange information without collapsing different security domains into a single network.
A secure gateway operating at those boundaries has to do more than transfer data. It must determine which information is permitted to cross, apply filtering rules, preserve separation between domains, record activity, and continue operating predictably when individual services or connections fail.
Deployable versions add further constraints. A unit fitted aboard a submarine faces different limitations on space, cooling, power, vibration, and maintenance access from a rack installed in a protected data centre. Aircraft and armoured vehicle installations can add further requirements around temperature, electromagnetic compatibility, weight, shock, and platform specific interfaces.
Airbus has not disclosed the contract value, so the manufacturing scale cannot yet be quantified from the announcement. The 25-year duration nevertheless points to a sustained engineering and support workload rather than a single procurement event, with several configurations likely to be produced and maintained as operational requirements develop.
Certification will also be a continuing process rather than a one-time milestone. Airbus said PARACOM will be approved and certified for exchanges across several classification levels, meaning future hardware and software changes will have to preserve the security properties on which those approvals are based.
That makes lifecycle support part of the capability itself. A gateway that is secure at delivery but cannot be upgraded safely as threats and computing technology change would lose value long before the surrounding military platforms leave service.
PARACOM gives Airbus a long period over which to manage that problem. The industrial test will be maintaining a common secure gateway family across data centres, command posts, ships, submarines, aircraft, drones, and land vehicles while the electronic environment continues to change around it.
