Galileo anti-spoofing technology has passed a major real-world test, producing what European space authorities describe as the first civil GNSS position authenticated through both navigation data and ranging information under spoofing conditions. The breakthrough matters directly to shipping because a spoofed satellite-navigation signal can make a receiver calculate a convincing but false position — exactly the kind of failure bridge teams need to identify before bad data spreads into ECDIS, AIS and other connected navigation systems.
During a two-hour test on 16 September 2026, five operational Galileo satellites transmitted an encrypted component of the E6 signal over Europe. Receivers in Andøya, Norway, and at the European Space Agency’s ESTEC navigation laboratory in the Netherlands successfully established authenticated positions using Galileo’s developing Signal Authentication Service (SAS).
The milestone goes beyond Galileo’s already operational Open Service Navigation Message Authentication (OSNMA). OSNMA authenticates navigation-message data. SAS is designed to authenticate the ranging information used to calculate position.
GNSS resilience is moving from “something looks wrong” toward “which signal can I prove is genuine?”
That does not make a ship spoof-proof. It gives future compatible receivers another layer of evidence when satellite-derived position information conflicts with the real world.
What Did Galileo’s Anti-Spoofing Test Actually Prove?
The European Space Agency and the EU Agency for the Space Programme announced the test results on 17 September. Galileo satellites E06, E21, E23, E34 and E36 encrypted the E6-C signal component at 1278.75 MHz for approximately two hours.
Receivers at Andøya and ESA’s ESTEC centre established positions using authenticated signals. The Norwegian trial took place during Jammertest, an exercise in which navigation equipment is deliberately exposed to realistic jamming and spoofing conditions.
EUSPA describes the demonstration as the first civil GNSS position authenticated through both navigation data and ranging information. That is the technical distinction that makes the test important.
Galileo Anti-Spoofing: OSNMA vs SAS
| Feature | OSNMA | Galileo SAS |
|---|---|---|
| Main job | Authenticates Galileo navigation-message data | Authenticates ranging information used in the position solution |
| Signal | E1-B navigation message | E6-C encrypted signal component |
| Security question | “Did this navigation data really come from Galileo?” | “Can I trust the satellite range used to calculate my position?” |
| Status | Initial Service since 24 July 2025 | Testing; Initial Service targeted for 2027 |
| Shipping relevance | Stronger trust in navigation data | Stronger resilience against counterfeit ranging signals designed to create false positions |
Why OSNMA Alone Does Not Solve Every Spoofing Scenario
OSNMA is already a major step because it lets compatible receivers verify that navigation-message data originated from Galileo and was not altered.
But position is not calculated from message content alone. A GNSS receiver also estimates distance to satellites from signal timing. A sophisticated spoofing attack can target the ranging process and gradually move the calculated position while still presenting information that looks believable.
SAS is intended to complement OSNMA by protecting this second layer.
SAS adds: “Can I trust the ranging signal used to calculate where I am?”
Jamming vs Spoofing: The Difference Matters on a Ship
| Threat | What happens | Typical effect | Authentication effect |
|---|---|---|---|
| GNSS jamming | Interference overwhelms legitimate satellite signals | Position can disappear, degrade or become unavailable | Authentication cannot restore a signal the receiver cannot reliably receive |
| GNSS spoofing | Counterfeit signals imitate real satellites | Receiver may show a plausible but false position or time | Authentication can help identify and reject fake signals |
A complete loss of satellite position is obvious. A smooth, believable and wrong position can be more dangerous because the navigator may continue trusting it.
Why GPS Spoofing Is a Shipping Problem
Merchant ships increasingly use GNSS-derived information across multiple bridge and shore systems. Position information can support:
- ECDIS route monitoring;
- AIS position reports;
- course and speed over ground;
- track-control functions;
- bridge alarms;
- VDR recordings;
- time synchronisation;
- and shore-side vessel monitoring.
If the original GNSS position is false, the error can propagate into systems that look independent on separate screens but rely on the same underlying source.
This is why Tide Signal’s Maritime Cyber Security 2026 guide treats GNSS interference as an operational-resilience issue, not merely an electronics problem.
GNSS Does Not Mean GPS
GNSS is the general term for global navigation satellite systems. GPS is the US system. Galileo is the European system, while GLONASS and BeiDou provide additional constellations.
A modern receiver may use several constellations at once. That can improve availability and geometry, but multi-constellation reception alone does not prove that a signal is genuine. Authentication is a different resilience layer.
What Does GNSS Spoofing Mean for ECDIS?
ECDIS does not independently create the ship’s satellite position. It displays and processes information supplied by connected sensors.
If a compromised GNSS source outputs a false position, the vessel can appear in the wrong location on ECDIS unless the conflict is detected by another system or by the bridge team.
Authenticated GNSS could eventually give integrated bridge systems another way to evaluate whether a position source deserves trust. It does not remove the need for independent navigation cross-checks.
What Does GNSS Spoofing Mean for AIS?
AIS can broadcast position and movement information received from onboard sensors. If the source position is wrong, AIS information can also become wrong even when the AIS unit itself has not been attacked.
A strange AIS track therefore does not by itself prove deliberate AIS manipulation. Possible causes include spoofed GNSS, jamming-related degradation, equipment problems, delayed reception, manual-data errors or deliberate interference.
Why This Matters in the Strait of Hormuz and Other High-Risk Waters
Navigation interference is no longer an abstract laboratory concern for shipping. Tide Signal’s Strait of Hormuz live shipping status explains why AIS visibility and GNSS integrity must be treated carefully when evaluating vessel movements in a security-sensitive waterway.
The same operational principle applies anywhere a navigation anomaly coincides with dense traffic, restricted sea room, high-value cargo, pilotage, security pressure or difficult weather.
The value of authenticated position increases when the cost of trusting a false position increases.
Could Galileo SAS Make Ships Spoof-Proof?
No. That would overstate the technology.
- SAS remains in testing during 2026.
- Initial Service is targeted for 2027.
- Compatible receivers and proper bridge integration will be required.
- Signal authentication does not eliminate radio-frequency jamming.
- Sensor faults and installation errors remain possible.
- Radar, visual navigation and other independent sources remain essential.
- Company procedures, Master’s standing orders and official navigation requirements still govern shipboard response.
What Should Bridge Teams Do When GNSS Cannot Be Trusted?
No general article can replace vessel-specific SMS procedures, standing orders, equipment manuals or official navigational guidance. The core resilience principle is nevertheless straightforward: do not allow one suspect digital source to become the only source of truth.
Depending on the ship and situation, independent checks can include radar ranges and bearings, visual fixes where available, parallel indexing, echo-sounder trends, dead reckoning, independent heading and speed information, VTS or pilot information and comparison between separate position sources.
Tide Signal’s X-Band vs S-Band Radar guide explains why radar remains an independent navigation tool when satellite position becomes doubtful.
Radar Can Expose a False GNSS Position
A radar echo from a coastline, buoy or vessel is not created by GPS. Radar transmits and receives its own radio energy.
GNSS can support overlays, integration and stabilisation, but a physical radar range or bearing can provide an independent reality check when the ECDIS position does not fit the observed environment.
OSNMA Is Already Operational
Galileo OSNMA reached Initial Service on 24 July 2025. The service is available to compatible users and adds a digital-authentication layer to Galileo navigation data.
That means the transition toward authenticated civil GNSS has already started. SAS is the next step because it extends trust toward the ranging measurement used in the position solution.
Why 2027 Is the Date Shipping Should Watch
The Galileo roadmap targets a SAS Initial Service declaration in 2027. Further testing and accreditation are still required before the capability moves from demonstration into normal service.
Shipping companies do not need to replace bridge equipment overnight. More useful questions are:
- Does future GNSS equipment support authenticated Galileo services?
- Can existing receivers use OSNMA?
- How does the bridge alert the navigator when position integrity is doubtful?
- Which onboard systems depend on the same GNSS source?
- Can the vessel continue safely when satellite position becomes unavailable or untrustworthy?
Authenticated GNSS and Maritime Cyber Resilience
A vessel does not need to be internally “hacked” for a cyber-related navigation risk to exist. Spoofing can manipulate the information environment outside the vessel.
The operational response still follows familiar resilience logic: detect unreliable data, prevent propagation, use trusted fallbacks, report the anomaly and preserve safe navigation.
For the wider framework, see Tide Signal’s Maritime Cyber Risk in 2026 and Maritime Cyber Security 2026.
Why Authenticated Position Matters for Autonomous Shipping
Automation increases the value of trustworthy position, navigation and timing data. A system expected to hold routes, respect geofences, support remote supervision or make navigation decisions needs a reliable way to distinguish genuine position information from a convincing false input.
Authenticated GNSS is therefore likely to become one component of wider assured-PNT architectures combining satellite, inertial, terrestrial and onboard sensor information.
Ports Could Benefit Too
The potential maritime use extends beyond bridge navigation. Ports increasingly depend on positioning and timing for terminal equipment, automated vehicles, geofencing, asset tracking, surveying, dredging, pilotage support and digital infrastructure.
A trusted satellite-navigation layer could therefore strengthen resilience across the ship-port interface as well as onboard vessels.
What Galileo SAS Does Not Change
| Still true | Why it matters |
|---|---|
| Jamming remains dangerous | Authentication cannot guarantee a usable position if legitimate signals are overwhelmed. |
| Radar remains independent | Physical radar observations remain valuable when electronic position integrity is uncertain. |
| AIS is not ground truth | AIS can inherit bad sensor data and can also be incomplete or manually incorrect. |
| Human factors remain critical | “Authenticated” must not be interpreted as “infallible”. |
| SAS is not live service yet | The September 2026 result is a test milestone; 2027 is the next major target. |
What Shipping Companies Should Watch Next
- SAS Initial Service in 2027: the next major Galileo milestone.
- Marine receiver support: adoption by bridge-equipment manufacturers will determine how quickly ships can use the capability.
- Type approval and class integration: secure satellite features need to reach certified maritime equipment.
- Multi-sensor fusion: the strongest systems will combine authenticated GNSS with independent sources rather than relying on one constellation alone.
- Real ship trials: merchant-vessel demonstrations will show how the technology performs inside an actual bridge environment.
Related Tide Signal Analysis
Galileo Anti-Spoofing FAQ
What is Galileo anti-spoofing?
Galileo uses authentication services designed to help receivers verify whether satellite-navigation information is genuine. OSNMA authenticates navigation data, while the developing Signal Authentication Service adds ranging authentication.
What did Galileo achieve in September 2026?
ESA and EUSPA reported the first civil GNSS position authenticated through both navigation data and ranging information under spoofing conditions during a controlled real-world test.
When did the Galileo SAS test take place?
The test took place on 16 September 2026, with results announced on 17 September.
What is OSNMA?
Open Service Navigation Message Authentication is Galileo’s navigation-data authentication service. It allows compatible receivers to verify that a Galileo navigation message is genuine. Initial Service began on 24 July 2025.
What is Galileo SAS?
The Signal Authentication Service adds authentication of ranging information using the Galileo E6 signal and is designed to complement OSNMA.
When will Galileo SAS become operational?
The current roadmap targets an Initial Service declaration in 2027. It remains in testing and validation during 2026.
Does Galileo SAS stop GNSS jamming?
No. Jamming blocks or overwhelms legitimate signals. Authentication primarily helps identify counterfeit signals used in spoofing.
Can GNSS spoofing affect ECDIS?
Yes. If the GNSS source supplies a false position, ECDIS can display the vessel in the wrong place unless the error is detected through independent cross-checks or system integrity functions.
Can GNSS spoofing affect AIS?
Yes. AIS position information can become inaccurate if its underlying GNSS input is wrong, even when the AIS unit itself has not been attacked.
Will authenticated Galileo replace radar navigation?
No. Radar and other independent navigation methods remain essential. Authentication improves trust in GNSS but does not remove the need for resilient bridge procedures.
Primary Sources & Further Reading
- ESA — Galileo’s first civil authenticated position fix under spoofing conditions
- EUSPA — First civil authenticated GNSS position using SAS
- EUSPA — Galileo OSNMA
- European GNSS Service Centre — OSNMA service status
- ESA Navipedia — Galileo Signal Authentication Service
- ESA — Galileo vs spoofing real-world tests
