Galileo signal authentication tackles a troubling navigation problem: a receiver that confidently shows the wrong location can be more dangerous than one that admits it has lost the signal.
That is the problem behind a new Galileo milestone. On 16 September 2026, five operational satellites transmitted encrypted test signals for two hours. Receivers in Norway and the Netherlands used them to determine their position. ESA announced the result the next day, describing it as the first real-world positioning with Galileo’s upcoming Signal Authentication Service, tested under spoofing conditions. ESA’s test report
The exercise took place during Jammertest, where navigation equipment is deliberately exposed to interference. It was a test of a service under development, not the launch of universal protection for every phone.
Galileo signal authentication makes a convincing lie harder
Spoofing involves misleading a receiver with false navigation information or signals. It differs from jamming, which disrupts reception. The practical concern is that an apparently plausible answer may reach the application using the receiver.
Galileo already has a first layer of protection. Its Open Service Navigation Message Authentication, or OSNMA, checks that navigation data originated with the system. ESA says that service became operational on 24 July 2025; many compatible receivers can gain the function through software changes. ESA’s explanation of message authentication
The new service adds a different check. A receiver calculates location using both satellite information and measurements of signal travel time. Authenticating the message and authenticating the ranging signal address different parts of that calculation.
EUSPA describes a system in which receivers obtain supporting code information through the internet, allowing them to use the encrypted signal without holding confidential cryptographic material. Receiver implementation and supporting infrastructure are therefore part of the work, not details that can be assumed away. EUSPA’s service-development update
Trust has to reach the device
For a delivery company, a surveyor or a navigation app, the meaningful outcome is whether the equipment can recognise that something is wrong and respond appropriately. A successful satellite test does not, by itself, establish that an existing device supports the new protection.
ESA says validation and accreditation are planned for 2027 before the Signal Authentication Service is declared operational. It expects the new service and OSNMA together to reject a broad range of spoofing attacks, with worldwide access free of charge. That is a development plan and a defined capability claim—not a promise that interference becomes impossible. ESA
The wider implication is a change in what good navigation means. Accuracy answers how close a position is to reality. Authentication adds evidence about whether the signals behind that answer should be trusted.
As more decisions depend on location, a trustworthy answer can be as important as a precise one. This test is an encouraging step towards giving receivers a better basis for telling the difference.
Featured image: ESA’s navigation testbed van in Norway, photographed during an earlier test campaign. Image: ESA.
Leave a Reply