Home › Technology › OSNMA anti-spoofing
Technology

OSNMA Anti-Spoofing GNSS Receivers

OSNMA anti-spoofing lets a receiver confirm that Galileo navigation data really comes from Galileo. Eview mosaic-X5 receivers (HB6, HB56, HB62) and mosaic-G5 receivers (HB50, HB52, HBEV11) support it, powered by Septentrio modules, and layer it with AIM+ signal checks to catch spoofing and replay attacks.

Ask a quote See OSNMA receivers
24 Jul 2025
OSNMA Initial Service
Free
No subscription
E1-B
Galileo signal used
P-256 / P-521
ECDSA root key
How it works

How OSNMA authenticates Galileo signals

Authentication in the signal
Galileo broadcasts authentication data inside the E1-B I/NAV navigation message. The receiver needs no internet link or extra service to use it.
TESLA protocol
OSNMA uses the TESLA protocol: tags are sent first and the keys that verify them are released later, so a spoofer cannot forge valid tags in advance.
Signed root key
The root key is signed with ECDSA (P-256 or P-521). The receiver stores a Merkle-tree root to check the public key, building a chain of trust back to Galileo.
Layered with AIM+
OSNMA authenticates data, not the signal path. AIM+ adds timing, Doppler, geometry and multi-frequency checks to catch replay. See AIM+ anti-jamming.
Free and open
OSNMA is part of the Galileo Open Service. There is no subscription and no licence fee for the service itself. See multi-constellation GNSS.
Integrity alongside
RAIM+ checks measurement consistency and excludes faulty satellites, which complements authentication. See RAIM+ integrity monitoring.
Key facts

OSNMA at a glance

ItemDetail
Service statusInitial Service declared operational on 24 July 2025
SignalGalileo E1-B, I/NAV navigation message
ProtocolTESLA (timed, delayed key release)
KeysRoot key signed with ECDSA P-256 or P-521; receiver stores a Merkle-tree root
CostFree, part of the Galileo Open Service, no subscription
What it authenticatesGalileo navigation data
Time to first authenticated fixA few minutes from a warm start; a cold start can take much longer while keys are retrieved
What it does not coverMeaconing (replay of real signals) is not detected by OSNMA alone; AIM+ signal checks cover this layer

Source: EUSPA / European GNSS Service Centre. Read how this applies to drones in detecting GNSS spoofing on commercial drones.

Recommended products

Eview receivers with Galileo OSNMA

ProductBest forKey specs
HB6Lightweight UAV and robot RTKmosaic-X5, 100 Hz, 45 g, USB-C, microSD, 4.5–12 V
HB56Flange-mount installationsmosaic-X5, metal housing, SD logging, 100 Hz
HB62 baseAuthenticated RTK base stationsmosaic-X5, NTRIP, Ethernet, 64 GB logging, IP67, 9–36 V
HB50Low-power, compact platformsmosaic-G5 P3, 59 × 44 × 12 mm, 50 g, 0.44 W, 20 Hz
HB50HCompact heading with OSNMAmosaic-G5 P3H, dual-antenna heading, 0.60 W
HB52 / HB52HUltralight drones and robotsmosaic-G5, 48 × 35 × 12.6 mm, USB-C, microSD; HB52H heading
HBEV11 smart antennaBase or rover with one cablemosaic-G5, one M12 cable, Galileo HAS

All products are quote-based. For a complete datasheet, email sales@gnss-solutions.com. OSNMA is not available on mosaic-H products (HB6 Pro, HB56H). Browse all box receivers and smart antennas.

Use cases

Where OSNMA anti-spoofing helps

Commercial drones
Authenticated Galileo data for flights where a false position is a safety risk. See UAV and drone GNSS.
eVTOL and aviation
An extra layer of trust in navigation data for air mobility. See eVTOL GNSS.
Autonomous vehicles
Spoofing checks for vehicles that act on their GNSS position. See autonomous vehicles.
Marine navigation
Authenticated position for vessels in areas with reported spoofing. See marine GNSS.
RTK base stations
An authenticated base protects every rover that uses its corrections. See survey and GIS.
Resilient positioning
OSNMA combined with AIM+ for critical commercial systems. See resilient GNSS.
Integration

How to use OSNMA

Choose the right module
OSNMA runs on mosaic-X5 and mosaic-G5 products. If you also need heading, the HB50H or HB52H give both. See mosaic-X5 vs mosaic-G5.
Keep firmware current
Use the latest firmware for OSNMA support and key handling. Firmware and manuals are on firmware downloads.
Read the status
Authentication status is reported in the receiver output, so your software can act on it. See NTRIP, RTCM and RINEX.
FAQ

OSNMA anti-spoofing: frequently asked questions

What is OSNMA and how does it stop spoofing?

OSNMA (Open Service Navigation Message Authentication) adds cryptographic tags to the Galileo E1-B navigation message. Using the TESLA protocol and an ECDSA-signed root key, the receiver checks that the navigation data came from Galileo. A spoofer cannot create valid tags, so forged Galileo data is rejected.

Does OSNMA affect accuracy or speed?

It does not change positioning accuracy, because it checks the navigation data rather than the measurements. The first authenticated fix takes a few minutes from a warm start, and a cold start can take much longer while keys are retrieved. The receiver can position while authentication completes.

Do I need a subscription?

No. OSNMA is free and part of the Galileo Open Service. The Initial Service was declared operational on 24 July 2025. You only need a receiver that supports it, such as Eview mosaic-X5 and mosaic-G5 products.

Does OSNMA protect against meaconing?

Not by itself. Meaconing replays real, authentic signals with a delay, so the tags are still valid. That is why Eview receivers layer OSNMA with AIM+ signal-consistency checks on timing, Doppler, geometry, frequencies and constellations.

What is the difference between OSNMA and AIM+?

OSNMA authenticates Galileo navigation data with cryptography. AIM+ is Septentrio’s signal processing that removes jamming and checks signals for spoofing. Used together on mosaic-X5 and mosaic-G5 receivers, they cover more threats than either one alone, including jamming, forged navigation data and replay.

Related reading

Add authenticated positioning to your system

Tell us your platform and security needs, and we will recommend an OSNMA-capable receiver.

Ask a quote