Europe's Galileo satellite navigation system largely regained service Thursday, a full week after a mass outage began on July 11. The European Global Navigation Satellite Systems Agency, known as GSA, said that commercial users would start to see coverage returning, but that there might be "fluctuations" in the system. What remains unclear is what exactly caused the downtime—and why it persisted for so long.
The incident took down all of the GPS-like system's timing and navigation features other than "Search and Rescue," which helps locate people in remote areas. As the days dragged on, what might have simply been an inconvenient blip ballooned into a major incident. And while European systems and services can still fall back to other timing and navigation options, like GPS, the prolonged outage serves as a chilling reminder of the modern world's intrinsic reliance on fallible global positioning systems.
Lily Hay Newman covers information security, digital privacy, and hacking for WIRED.
The Galileo system launched in 2016, and has been in initial testing phases since. It represents an $11 billion investment by the EU, with the goal of becoming an alternative to navigation options like GPS, run by entities like the US Air Force, the Russian system GLONASS, or China's BeiDou. The European Commission has been working to find almost $18 billion in new funding for the EU's 2021 to 2027 space programs, including Galileo. There are more than 100 million devices that can receive Galileo's signal, but nearly all are programmed to fall back on GPS. If they weren't, the week of outages would have caused a massive humanitarian crisis.
Timing and navigation data underlies all digital systems, since server networks (read: the entire internet) use satellite timekeeping to sync their clocks and interoperate. Navigation data is also crucial for everything from delivery of essential goods—like food and gasoline—to transportation and global shipping. Without it, infrastructure systems and commerce would grind to a halt. Basic necessities would quickly become scarce. Fortunately, Europe had GPS to fall back on. If a similar outage were to take GPS offline, most devices would have no such alternative .
"Most large, complex systems like this go through some initial problems early on, but this does seem to be a little bit worse than one would expect," says John Sheehy, vice president of sales and strategy at the security firm IOActive. "It's most likely related to the relative newness of the environment and the relative inexperience of the team."
GSA has so far still provided only a rough sketch of what caused the outage. "The technical incident originated by an equipment malfunction in the Galileo control centers that calculate time and orbit predictions, and which are used to compute the navigation message," the GSA wrote on Thursday in its most specific statement yet. "The malfunction affected different elements on both centers."
That generally confirms what researchers who use the Galileo system had noticed independently. Satellites transmit packages of data to Earth that convey a set of astronomical positioning and timing data, used to compute satellite orbits and positions. But some combination of errors in the Galileo processing system led it to base these calculations on the wrong date, for example, using July 11 time stamps—the day the outage began—throughout the week. Eventually, the system even interpreted this data as referring to July 18, instead of the previous Thursday. The frozen time stamp seemed to be a symptom of problems with the ground-based processing system, rather than the satellites themselves.
"From the operational satellites the signals were good, the time was good, but in the messages the satellites send the positions were not updated," says Fabio Dovis, a researcher in the satellite navigation lab at Politecnico di Torino University in Italy. "We tried replacing that part of the message with information on position taken from other reliable sources and you could get the correct position. So it was working, it just seems like there was a problem in the control system that was not able to update this information."
Why a Geocode Is Not an Address