Practical Spoofing Attacks against Galileo OSNMA with Time-Synchronization Manipulation
This paper demonstrates that Galileo's Open Service Navigation Message Authentication (OSNMA) can be bypassed through a novel time-synchronization manipulation strategy, enabling attackers to successfully spoof receivers to arbitrary locations and times while satisfying authentication requirements via replay, forgery, and dual-frequency forgery attacks.
Original paper licensed under CC BY 4.0 (http://creativecommons.org/licenses/by/4.0/). This is an AI-generated explanation of the paper below. It is not written or endorsed by the authors. For technical accuracy, refer to the original paper. Read full disclaimer
Imagine you are trying to find your way using a magical, invisible map beamed down from the stars. This is how Global Navigation Satellite Systems (GNSS), like Europe's Galileo, work for your phone or car. They send out a constant stream of digital "whispers" telling you exactly where you are and what time it is. But because these whispers are public, a sneaky trickster could pretend to be a satellite, shouting fake coordinates to lead you to the wrong place. To stop this, the Galileo system added a special security feature called OSNMA. Think of OSNMA as a high-tech seal of approval on every message. It uses a secret code that changes over time; the satellite sends the message now, but the key to unlock and verify that message arrives a little later. If the key matches the message, you know it's real.
However, there is a catch. For this security system to work, your device (the receiver) must have a very accurate internal clock. It needs to know the "official" time well enough to check if the delayed key has arrived at the right moment. If your clock is way off, the system assumes the message is fake and throws it away. This paper explores a clever loophole in that clock-checking rule. The researchers discovered that if a trickster can mess with your device's internal clock and send a fake signal at the same time, they can trick the security system into thinking everything is perfectly synchronized, even though both the time and the location are completely wrong. It's like a thief convincing a guard that the clock on the wall is correct, while simultaneously handing the guard a fake ID that matches that wrong time.
The Great Clock Heist
In this study, a team of researchers from Xidian University in China decided to see if they could break the Galileo system's new security guard. They didn't try to crack the secret codes themselves—that's mathematically impossible with current technology. Instead, they looked at the rules the guard uses to decide who gets in. The guard has a strict rule: "The time on your watch must be within 30 seconds of the satellite's official time." If your watch is off by more than that, the guard says, "Nope, you're too confused to be trusted," and ignores you.
The researchers realized that the guard only checks if your watch matches the satellite's time, not if your watch is actually correct compared to the real world. This led them to a sneaky strategy they call "Artificially Manipulated Time Synchronization" (ATS). Imagine you are trying to enter a club with a strict bouncer. The bouncer says, "Your watch must match the wall clock." If you walk in with a watch set to 2:00 PM and the wall clock says 2:05 PM, you get in. But what if the bouncer is tricked? What if you secretly change the wall clock to 2:00 PM before you show your watch? Now, your 2:00 PM watch matches the 2:00 PM wall clock, and the bouncer lets you in, even though the real time is actually 5:00 PM. That is exactly what the researchers did to the Galileo receivers.
The Three Tricks of the Trade
Using this "ATS" trick, the team built three different ways to fool the system, which they tested on real commercial devices and open-source software receivers.
1. The Time-Travel Replay (TSR)
First, they tried a "Time-Travel Replay." Usually, if you record a satellite signal from yesterday and play it back today, the receiver rejects it because the time on the signal (yesterday) doesn't match the receiver's current time (today). But with the ATS trick, the researchers first hacked the receiver's internal clock to think it was yesterday. Then, they played back the old recording. The receiver checked the time, saw that its "hacked" clock matched the "old" signal perfectly, and happily accepted the fake location from yesterday. In their experiments, they successfully replayed signals that were up to 150 seconds old, and even managed to trick a receiver into thinking it was two days in the past, all while the security system gave a thumbs-up.
2. The Fake ID Forgery (TSF)
Next, they wanted to do more than just replay old signals; they wanted to create brand-new fake locations. This is the "Forgery" attack. The researchers built a system to generate completely fake satellite signals for a location of their choice—say, a secret base in the middle of the ocean. The hard part was making the security codes look real. Since they couldn't invent new secret keys, they used "stolen" keys from past broadcasts (which are public) to sign their fake messages. By combining these old keys with their hacked receiver clock, they created a "Forged Signal" that looked perfectly valid. They successfully tricked receivers into believing they were at specific fake coordinates, like (20° N, -51° W), and at a specific past time, all while passing the security check.
3. The Double-Deception (TSDF)
Finally, modern receivers are smart; they listen to two different radio bands (E1 and E5b) to make sure they aren't being tricked. If you fake one but not the other, the receiver catches you. So, the researchers created a "Dual-Frequency Forgery." They used two devices to broadcast fake signals on both bands simultaneously, making sure the fake locations and times matched perfectly on both. It was like a magician pulling two identical rabbits out of two different hats at the exact same time. Their tests showed that even these smart, dual-band receivers were fooled, accepting the fake position and time as authentic.
The Results and The Reality Check
The team tested these tricks in a real-world lab setting using actual Galileo receivers from companies like Septentrio and U-blox, as well as open-source software. The results were clear: every single attack worked. The receivers accepted the fake signals, passed the OSNMA security check, and calculated the wrong position and time as if it were the truth.
However, the researchers were careful to point out the limits of their magic. To pull this off, the attacker needs to be close to the victim (within a few meters in their tests) and have a strong enough signal to drown out the real satellites. They also noted that the "Forgery" attack can only send you to a location at a time in the past—specifically, a time for which the secret keys have already been revealed. You can't use this to send someone to a future date or a location where the keys haven't been shared yet.
The paper concludes that while the Galileo system's cryptography is strong, the way it relies on the receiver's internal clock creates a vulnerability. If an attacker can mess with that clock, the whole security system can be bypassed. The researchers suggest that fixing this might involve using more secure ways to get the time (like encrypted network protocols) or making the security keys specific to a geographic area so they can't be reused anywhere else. For now, they've shown that the "guard" at the door can be fooled if the "clock" on the wall is rigged.
Drowning in papers in your field?
Get daily digests of the most novel papers matching your research keywords — with technical summaries, in your language.