Galileo security combines continuous monitoring of the satellite system, controlled access to encrypted navigation services, and authentication of the information received by civilian devices. In a November 3, 2026 account, the European Union Agency for the Space Programme, EUSPA, described how these measures operate alongside work on secure satellite connectivity and quantum communications.
The agency’s approach covers both the infrastructure delivering a service and the information reaching its users. Encryption, access controls, cybersecurity procedures, and physical protection secure facilities and systems. At the receiver, navigation-message authentication provides a way to check the origin and integrity of Galileo data. These functions address different parts of the same operational service.
Monitoring Galileo Around the Clock
The Galileo Security Monitoring Centre, or GSMC, operates from Saint-Germain-en-Laye near Paris and San Martín de la Vega near Madrid. Organized as a security operations center, it monitors Galileo’s components and responds to alerts involving accidental events, deliberate interference, and cybersecurity threats. Its work includes detecting events that could interrupt services and implementing responses to maintain or restore operations.
The center also manages access to Galileo’s Public Regulated Service, known as PRS, and protects sensitive information associated with its use. PRS supplies encrypted navigation to government-authorized users, including police and emergency services. It is designed for applications that require high continuity and enhanced resistance to jamming and spoofing.
EUSPA’s description of the center also identifies a formal response channel for serious security incidents. When the Council issues instructions concerning threats to the Union, its member states, or the operation of the relevant space systems and services, the GSMC implements those instructions. Monitoring, access management, and incident response are established operational responsibilities within Galileo.
Authenticating Navigation Data
Jamming and spoofing affect navigation receivers in different ways. Jamming adds interference to the radio frequencies used by satellite navigation, disrupting reception of signals. Spoofing transmits false signals intended to mislead a receiver about its position or time.
Galileo’s Open Service Navigation Message Authentication, or OSNMA, addresses the authenticity of navigation data. Declared operational on July 24, 2025, the freely accessible service allows compatible receivers to check whether the information originated with Galileo and remained unchanged.
Authentication information travels in previously reserved fields of the Galileo navigation message. Compatible receivers process that information using the published protocol and certified cryptographic material. The authenticated data include satellite orbital information and timing parameters, which receivers use in navigation calculations. The service adds a check on the information used by the receiver without changing the underlying Open Service navigation performance.
EUSPA’s technical explanation describes an infrastructure that begins on the ground. The European GNSS Service Centre generates the authentication elements, which are uploaded to the satellites for broadcast. Receiver software then performs the verification steps. This arrangement connects ground-based cryptographic operations, the satellite broadcast, and the device calculating a position.
OSNMA is already appearing in professional equipment. In its July 2026 service review, EUSPA reported implementation in smart tachographs and timing-and-synchronization receivers. The agency also described the PATROL project, which integrated OSNMA into a tachograph using a STMicroelectronics receiver chip and additional anti-spoofing techniques.
These applications give authentication a direct role in systems that record vehicle activity or supply trusted timing. The same review identified a Furuno Electric timing solution and a Qualinx chip incorporating OSNMA hardware. Each places the verification function within equipment that uses satellite-derived information.
Adding Signal Authentication and Secure Connectivity
Galileo’s development work also includes authentication of the ranging signals used to measure distance. On September 16, 2026, five operational Galileo satellites transmitted an encrypted test signal over Europe for two hours. ESA reported that receivers in Andøya, Norway, and at its navigation laboratory in the Netherlands established positions using the upcoming Signal Authentication Service.
The test explains the distinction between two authentication functions. OSNMA checks the navigation message. Signal authentication addresses ranging measurements, derived from the travel time between satellite and receiver. ESA announced service validation and accreditation activities for 2027, with the new service intended to complement OSNMA.
EUSPA’s November account extends beyond navigation to the planned IRIS² secure-connectivity constellation and the European Quantum Communication Infrastructure, EuroQCI. IRIS² is designed to combine satellites in low and medium Earth orbit. Its architecture includes complementary connections and redundancy to support service continuity.
The European Commission describes EuroQCI as a combination of terrestrial fiber networks and a satellite segment. National and cross-border networks will connect strategic sites, with quantum key distribution supplying a method for exchanging encryption keys. The intended users include government institutions, data centers, hospitals, and energy networks.
Laser links form another part of the connectivity work. Their concentrated beams carry data between optical terminals, a mechanism explained in New Space Economy’s satellite laser communications primer. EUSPA identifies their directionality as a useful property for security and resistance to interference. Across these programs, the functions remain specific: monitoring protects operations, authentication checks navigation information, and secure-connectivity infrastructure carries sensitive communications.
Useful Books Available on Amazon
