Telecoms, Datacoms, Wireless, IoT


Out-of-the-box spoofing mitigation with Galileo’s OS-NMA service

29 May 2020 Telecoms, Datacoms, Wireless, IoT

Over the past two decades, satellite-based positioning has become an indispensable, everyday technology that we constantly rely on – often even without being aware of it.

With the relentless expansion of applications and use cases, driven largely by falling cost of ownership and improvements in positioning accuracy, there will soon be one GNSS receiver in operation for every person on the planet. But now, with the accuracy challenge all but solved, security is becoming a key factor slowing the development of new, lucrative business models and emerging critical applications.

That’s why there is so much excitement around a new service from Galileo, the EU’s global navigation satellite system (GNSS). First conceived in 2013, Galileo’s open service navigation message authentication (OS NMA) system lets GNSS receivers ensure that the satellite signals they receive are, indeed, from Galileo satellites and that they have not been modified. The approach makes it more difficult for hackers and other bad actors to spoof GNSS receivers by feeding them fraudulent signals. The European GNSS constellation will be the first to offer authenticated navigation messages to civilian users free of charge.

The approach the European GNSS Agency (GSA) adopted to authenticate the signals is already well established for digital communication on the Internet. It consists of appending an encrypted authentication signature to GNSS navigation messages, which can be used to verify the messages based on a hybrid symmetric/asymmetric key approach.

The service will only be available to advanced GNSS receivers that are able to securely store a copy of the public key used to decrypt the authentication message and to ensure that it can be trusted. To ensure that current users of Galileo’s navigation services do not see their service interrupted, the new navigation messages, broadcast on Galileo’s E1B frequency band, will be fully backward compatible. This means that older receivers will still be able to use them to determine their position, simply without the value-add of message authentication.

A critical step towards fully secure positioning

The move by the GSA comes in response to growing demand across industries for secure positioning technology. “At the GSA, we work in close collaboration with the industry to design and leverage Galileo’s unique capabilities and rapidly develop new applications to respond to user needs,” said Fiammetta Diani, head of market development at the GSA.

OS NMA, step one in the agency’s plans, will not entirely solve the GNSS security challenge. It will, however, considerably raise the level of sophistication that such attacks require, benefiting a variety of applications that are frequent targets of spoofing attacks. These include smart tachographs used in trucks, taxis and ride sharing vehicles and tracking devices used in commercial cargo and fishing vessels. Reliably flagging spoofing attempts will make it more difficult for companies to skirt legislation by tampering with the GNSS receivers.

GNSS data authentication will also play an important role in so-called mission critical use cases – think advanced driver assistance systems, autonomous driving, or any number of risk-prone commercial activities. And, by mitigating one of GNSS’s main vulnerabilities, it will no doubt add value in less critical ones as well, in retail and logistics, smart cities and connected industries.

Leveraging OS NMA from day one

As a leading supplier of GNSS receivers for telematics solutions, we at u-blox have long been at the front line in bringing the benefits of OS NMA to our customers. Through our active involvement in the EU-led group of experts on the smart tachograph, for example, we are helping drive the implementation of OS NMA. That’s why it should hardly come as a surprise that our latest GNSS platforms (u-blox M9 for standard precision positioning, u-blox F9 for high precision positioning) are designed to leverage Galileo’s authenticated navigation signals from the day they go live.

“We are glad to see that a key player in GNSS manufacturing, such as u-blox, is already looking forward to exploit Galileo new features and in particular the open service navigation message authentication to contribute to safer road transportation in European roads and beyond,” says GSA’s Fiammetta Diani.

OS NMA is one of the cornerstones of our approach to increase the security and reliability of our GNSS receivers. It adds to improvements made by concurrently monitoring signals from several GNSS constellations on multiple frequency bands, as well as integrating other data, such as input from inertial sensors. That being said, for Galileo and for u-blox, OS NMA is just one more stepping stone towards fully secured GNSS-based positioning technology.


Credit(s)



Share this article:
Share via emailShare via LinkedInPrint this page

Further reading:

Module provides 4G LTE Cat 1 bis connectivity
Dizzy Enterprises Telecoms, Datacoms, Wireless, IoT
Mikroe adds 4G LTE Cat 1 bis connectivity where reliable data transmission and low power consumption are critical with the GC02S1-EU2 module.

Read more...
Enabling next-generation FPGA and SDR innovation
RFiber Solutions Telecoms, Datacoms, Wireless, IoT
Puzhi Electronic Technology has established itself as a dynamic provider of advanced ARM and FPGA-based solutions, delivering a comprehensive ecosystem of products designed for modern embedded and high-performance computing applications.

Read more...
Magnetic mount antenna takes the hassle out of 4G installations
iCorp Technologies Telecoms, Datacoms, Wireless, IoT
Designed for fast, tool-free installation, the YECN022CA 4G magnetic mount whip monopole antenna gives wireless devices a dependable cellular link in the field, where installation time and signal reliability both matters.

Read more...
Engineering for failure: why resilient telemetry matters more than perfect connectivity
Editor's Choice Telecoms, Datacoms, Wireless, IoT
One of the biggest assumptions in modern tracking systems is that connectivity will always be available. From an engineering perspective, this creates an interesting problem.

Read more...
Wi-Fi and Bluetooth smart module series integrates intelligence
iCorp Technologies Telecoms, Datacoms, Wireless, IoT
Quectel Wireless Solutions has expanded its smart module portfolio with the SH503FM, a new-generation series of Wi-Fi and Bluetooth smart modules.

Read more...
Powering smart sensor networks
CST Electronics Telecoms, Datacoms, Wireless, IoT
NeoCortec’s NeoMesh wireless mesh networking protocol and software stack is ideally suited for powering smart sensor networks where each device is required to send and receive small packets of data infrequently, but with high reliability.

Read more...
Lessons in long-distance telemetry
Omniflex Remote Monitoring Specialists Telecoms, Datacoms, Wireless, IoT
Ian Loudon, international sales and marketing manager at Omniflex, reflects on some of the key engineering lessons learned from decades of deploying wireless telemetry systems in demanding industrial applications.

Read more...
PEAK’s first automotive Ethernet solution
Industrial Data Xchange (IDX) Editor's Choice Telecoms, Datacoms, Wireless, IoT
The PAE-Media Converter is a robust and compact device designed to connect Automotive Ethernet (100BASE-T1 or 1000BASE-T1) with standard Ethernet (100BASE-TX or 1000BASE-T) networks.

Read more...
Compact LTE connectivity for IoT
iCorp Technologies Telecoms, Datacoms, Wireless, IoT
The Quectel EG916Q-GL is a compact LTE Cat 1 bis module designed to provide reliable and cost-effective cellular connectivity for IoT and M2M applications.

Read more...
Precision timing in compact package
Altron Arrow Telecoms, Datacoms, Wireless, IoT
Designed for use in harsh environments, the EX-423 incorporates a four-point mounted quartz crystal structure that improves shock resistance and reduces g-sensitivity.

Read more...









While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd | All Rights Reserved