Galileo tests a stronger defense against fake satellite positions

A position that comes with stronger evidence

Satellite navigation normally gives a user a location. A September 16 Galileo demonstration addressed a harder question: how can a receiver establish that the signals behind that location are genuine? EUSPA and ESA reported the result on September 17, describing an important step toward civil positioning protected against counterfeit signals.

During a two-hour window, five Galileo satellites transmitted an encrypted component used by experimental receivers. EUSPA says the receivers combined authenticated navigation information and ranging measurements from at least four satellites to calculate a position. Testing included the controlled Jammertest event in Norway.

This was a demonstration of the forthcoming Signal Authentication Service, or SAS—not a general service launch. The agencies point toward an initial service in 2027. Readers should not assume that an ordinary phone gained this protection simply because it can already receive Galileo.

Sources: EUSPA: authenticated Galileo position demonstration (September 17); ESA: Galileo's authenticated position fix under spoofing conditions

Spoofing is not the same problem as jamming

Norway's communications authority distinguishes two threats that are often blurred together. Jamming interferes with or blocks radio signals. Spoofing supplies false signals intended to deceive a receiver. Jammertest, held near Bleik on Andøya from September 14 to 18, brought organizations together to test navigation resilience under controlled conditions.

The practical difference is easy to picture. A map that refuses to provide a reliable location has made its uncertainty visible. A map that confidently puts a vehicle in the wrong place can invite a bad decision. That is why checking authenticity deserves attention alongside accuracy.

But authentication is not a universal anti-jamming cure. Evidence that a signal is genuine cannot create a usable signal when reception is unavailable. A system still needs a safe response when it cannot determine its position, including a clear indication to the user or the machine depending on it. This is an engineering distinction, not a claim that the trial measured every possible outage scenario.

Sources: Norwegian Communications Authority: Jammertest 2026

Two layers protect two kinds of information

Galileo's Open Service Navigation Message Authentication service, OSNMA, became operational on July 24, 2025. The European GNSS Service Centre explains that it lets a suitably equipped receiver check the origin and integrity of navigation-message data. That helps establish who sent the information and whether it has been altered.

SAS adds authentication of ranging information—the signal measurements involved in estimating distances. Its design uses Galileo's E6-C signal together with OSNMA and previously downloaded authentication material. The receiver compares stored signal samples against information it can verify after the relevant keys are disclosed.

One way to understand the distinction is to imagine a signed delivery instruction and a separate check on the evidence used to locate the delivery vehicle. Authentic instructions and trustworthy positioning are related, but one does not automatically establish the other. This analogy is explanatory; Galileo uses radio measurements and cryptography, not an external observer watching a vehicle.

Compatible receiver processing is essential. The existence of an open satellite signal does not mean every receiver implements its authentication features.

Sources: European GNSS Service Centre: operational OSNMA service; EUSPA: forthcoming Signal Authentication Service

A field result, with a deployment boundary

EUSPA reports that, during spoofing tests, conventional receivers produced false positions while the SAS receiver detected the attack and maintained a trusted solution. That is a result worth reporting with its conditions attached: particular receivers, a defined satellite configuration and organized test scenarios.

ESA describes further validation and security accreditation before operational deployment. A successful field exercise is evidence that the concept works under tested conditions, not a published guarantee that it defeats every attack or performs identically in every environment.

The service design also involves waiting for authentication information. An application needs to distinguish a fresh location estimate from one whose authenticity has already been checked. We do not assign a universal latency from this announcement: final performance commitments and receiver behavior are more relevant to users than a generic speed claim.

For a transport operator or equipment buyer, the immediate task is therefore to follow compatibility and validation evidence, not to replace existing safeguards on the strength of a headline.

Sources: EUSPA: authenticated Galileo position demonstration (September 17); ESA: Galileo's authenticated position fix under spoofing conditions; EUSPA: forthcoming Signal Authentication Service

Scientific perspective: trust has to be measurable

Lumacta's evidence-based assessment is that the important advance is stronger evidence behind a position, not a new contest over the smallest advertised location error. A useful navigation system needs to communicate both what it estimates and when that estimate should not be trusted. This is an editorial engineering assessment, not independent verification of the field experiment.

Future evaluations should report missed attacks, false alarms, time to authentication and the fraction of operating time for which an authenticated solution is available. They should disclose satellite visibility, receiver configuration and the tested interference conditions. Without those details, two products advertising authenticated navigation may be difficult to compare meaningfully.

A further question is how the surrounding application behaves. Does it slow down, request human attention or switch to a validated fallback when trusted positioning is unavailable? Authentication can improve the evidence entering a decision, but the decision system still has to use that evidence sensibly. The trial is encouraging precisely because it opens these measurable questions rather than making them unnecessary.

Sources: EUSPA: authenticated Galileo position demonstration (September 17); European GNSS Service Centre: operational OSNMA service; EUSPA: forthcoming Signal Authentication Service

The benefit depends on adoption, not just satellites

The economic opportunity is a more dependable foundation for services that use position and time. If receivers and applications adopt the technology effectively, operators could become better at distinguishing normal navigation from deceptive information. That is a potential benefit, not a quantified saving established by this particular trial.

Deployment will require more than the space segment. Manufacturers need compatible hardware and software, integrators need to understand authentication states, and organizations need procedures for handling alerts. Legacy equipment may continue working as before while lacking the new protection. A purchasing label saying Galileo-compatible is therefore not enough to establish SAS support.

For the public, the right conclusion is neither indifference nor instant confidence. Europe has demonstrated a significant additional defense against false positioning. It has not made satellite navigation immune to interference, and the forthcoming service should not be confused with an update already present on every device. The next news to watch is operational validation and clearly documented receiver support.

Sources: ESA: Galileo's authenticated position fix under spoofing conditions; European GNSS Service Centre: operational OSNMA service; EUSPA: forthcoming Signal Authentication Service