Galileo Signal Authentication Service (SAS)
-
What is Galileo SAS?

-
Why is Galileo SAS needed?

-
How does Galileo SAS work?

-
EUSPA’s role

-
Facts and figures

What is Galileo SAS?
SAS is a forthcoming Galileo service that will enable an authenticated positioning service.
It aims to make this authentication process possible without the need of sharing secret cryptographic material.
Why is Galileo SAS needed?
With the spoofing and jamming of GNSS signals on the rise, there is an increasing need for users to verify that the information they are receiving comes from a trusted source.
SAS provides a guarantee to users that the signals they are using come from actual Galileo satellites.

How does Galileo SAS work?

Galileo SAS complements the Galileo OSNMA with E6-based ranging authentication capabilities.
Specifically, Galileo SAS uses the existing Galileo E6-C signal, to be encrypted, in combination with OSNMA, through the semi-assisted authentication concept.
Portions of the encrypted E6-C signal are re-encrypted with OSNMA keys and are regularly published on the European GNSS Service Centre (GSC) website.
These portions of E6-C signals are downloaded by the users and decrypted with broadcast OSNMA TESLA keys, to be correlated with samples of the E6-C signal stored by the receiver. This process allows for open and free signal authentication without the need for users to manage private keys.

EUSPA's role

EUSPA supports the deployment and adoption of Galileo authentication services, including SAS, by ensuring that the service meets user needs and is integrated into downstream applications. EUSPA:
- develops the SAS infrastructure in charge of the generation of the RECS
- operates the Galileo SAS' infrastructure
- is responsible for the security accreditation of the service
- ensures that the service is delivered with high quality and in alignment with the future service commitments
- fosters Galileo SAS’ adoption across various market segments
Facts and figures



