Open Service Navigation Message Authentication (OSNMA)
Protection against GNSS interference
The recently launched Galileo OSNMA, a data authentication function, provides more robust Position, Velocity and Time information to Galileo Open Service users. This has been made freely accessible worldwide since the end of July.
GNSS interference is on the rise, with spoofing signals every day, providing unreliable or even fake positioning information.
An added layer of protection
The Galileo Open Service Navigation Message Authentication, or OSNMA, is a new authentication mechanism that lets Galileo Open Service users verify the authenticity of their GNSS information.
To quote EUSPA Executive Director Rodrigo da Costa: ‘With OSNMA, we increase assurance that the data users receive is indeed coming from Galileo and has not been modified in any way.’
While the OSNMA does increase the ability to detect spoofing events, it does not prevent their occurrence. Nor does it protect against jamming.
da Costa added: ‘Nonetheless, by amplifying the overall robustness and resilience of the Galileo Open Service, this added layer of protection helps keep users one step ahead of hackers.’
Galileo is the first GNSS system to offer protection from spoofing attacks as part of its Open Service worldwide. The OSNMA declaration of service follows an extensive testing phase where GNSS manufacturers, integrators and application developers utilised the Signal in Space (SiS) to assess the service’s performance across a range of scenarios and use cases.
Giving Galileo signals a unique digital signature
An integral function of the Galileo Open Service, OSNMA, provides data authentication to all enabled receivers. Specifically, the OSNMA authenticates data for geolocation information from the Open Service through the Navigation Message (I/NAV) broadcast on the E1-B signal component. This is realised by transmitting authentication-specific data in the previously reserved fields of the E1 I/NAV message.
By using these previously reserved fields, OSNMA does not introduce any overlay to the system; thus, the OS navigation performance remains untouched.
When OSNMA-enabled receivers receive the signals, they can decode the cryptographic data and, thanks to a previously downloaded public key, verify the authenticity of the position and time data.
Because the OSNMA is transmitted in the Galileo Open Service signal, which is already used in most devices, receivers only need to implement the protocol and download the certified public keys from the European GNSS Service Centre (GSC) website.
OSNMA relies as well on the implementation of a trusted time source to start up the protocol, accurate to at least five minutes, and a dedicated logic on the receiver side to guarantee the end-to-end authentication process. The service does not require the storage and management of secret keys on the user side, which facilitates the adoption in different communities.
All details can be found in the OSNMA Receiver Guidelines*.
The Galileo OSNMA delivers
OSNMA also makes Galileo signals unpredictable, thereby making them difficult to replay. This, combined with basic consistency checks in the receiver and the authentication service in general, makes spoofing an OSNMA-enabled receiver considerably more challenging.
For those segments that rely on accurate positioning information – automotive, timing and synchronisation, professional, maritime, aviation, drones – this is nothing short of a game-changer. Furthermore, and in the context of the frequent spoofing events experienced in recent years, Galileo OSNMA is now being included in the standards for civil aviation receivers, the first step for its adoption by the civil aviation community.
da Costa concluded by saying: ‘Stakeholders have clearly articulated the need for more robust GNSS services. The Galileo OSNMA delivers this robustness and, in doing so, provides enhanced security in positioning and timing solutions.’
Christoph Kautz, Director for Satellite Navigation and Earth Observation, at DG DEFIS, European Commission commented, in summary: ‘With this new capability, the EU is delivering on its commitment to provide secure, reliable space infrastructure that supports critical sectors and protects users across the globe.’
The OSNMA will be provided by EUSPA, which serves as the Galileo service provider.
Text based on material kindly provided by EUSPA
EUSPA 2021-2025 ©