Andøya: The Galileo Signal Authentication Service has produced its first real-world position fix, and it did so while hostile signals tried to fool the receivers. On the afternoon of Wednesday 16 September 2026, five operational Galileo satellites broadcast a new encrypted test signal over Europe for two hours, and receivers in Andøya, Norway, and at the European Space Agency’s navigation laboratory in the Netherlands used it to establish their position.
The trial took place during Jammertest, an annual event in which Norwegian authorities broadcast jamming and spoofing scenarios to test how receivers cope. Spoofing means sending fake satellite signals so that a device reports a wrong position, a threat that matters for aviation, shipping, emergency services and any system that depends on trusted timing.
The Galileo Signal Authentication Service works through encrypted ranging signals, the measurements of signal travel time between satellite and receiver. A receiver that checks those signals can detect when someone replays or forges them. The service complements Open Service Navigation Message Authentication, known as OSNMA, which has run since 2025 and confirms that the navigation message really comes from the Galileo system.
Used together, the two services should let receivers detect and reject a wide range of spoofing attacks. Both the Galileo Signal Authentication Service and OSNMA will be free of charge and available worldwide, and the High Accuracy Service will gain the same authentication features. ESA’s Joerg Hahn said that with both services users will know they can trust the position their device shows.
Several institutions share the work. The European Commission defined the concept, while ESA and the EU Agency for the Space Programme, EUSPA, designed the architecture and upgraded satellites and ground infrastructure. The Commission’s Joint Research Centre joined the testing, and Norwegian authorities ran the scenarios that put the signals under pressure.
The Galileo Signal Authentication Service result carries weight because Galileo already serves billions of users since it entered Open Service in 2016, and all smartphones sold in the single market must be Galileo-enabled. A trusted signal therefore reaches an enormous installed base, and authentication turns a convenience into a security feature. Governments that worry about interference near conflict zones and busy shipping lanes will watch the programme closely.
The next step is formal. In 2027, EUSPA, the Commission, ESA and industry will run service validation and accreditation, and only then will the Galileo Signal Authentication Service be declared operational. Until that date the September trial stands as proof of concept, and the validation campaign will show how the service performs against the range of attacks that real receivers face.





