Introduction to GNSS Architecture and the Reality of GNSS-Denied Environments

The Foundations of Satellite Navigation

Global Navigation Satellite Systems (GNSS), which include networks such as the American GPS, the European Galileo, the Russian GLONASS, the Chinese BeiDou, and the Indian NavIC, have revolutionized global aviation. Under normal operating conditions, these constellations allow an Unmanned Aerial System (UAS) to pinpoint its position, altitude, and velocity anywhere on Earth with absolute precision.

To understand why these systems fail, we must first understand how they operate. A GNSS constellation consists of dozens of satellites orbiting the planet in precise, predictable paths. Each satellite constantly broadcasts a radio frequency signal containing two vital pieces of information: the exact time the message was sent (measured by highly accurate onboard atomic clocks) and the satellite's precise position in space at that exact moment.

The receiver onboard the aircraft captures these signals. By comparing the timestamp embedded in the satellite's message with its own internal clock, the aircraft calculates exactly how long the radio signal took to travel through space at the speed of light. Multiplying this travel time by the speed of light yields the exact distance between the aircraft and that specific satellite.

When the aircraft calculates its distance from a single satellite, it knows it is located somewhere on the surface of an imaginary sphere centered around that satellite. When it receives signals from a second and third satellite, the intersection of these spheres narrows the possibilities down to two points in space. A fourth satellite is then used to resolve the correct point and correct any time synchronization errors in the aircraft's local clock. This process of intersecting spheres to find an absolute position in space is known as trilateration.

The Structural Vulnerability of GNSS Signals

Despite the incredible accuracy of GNSS, the entire architecture suffers from a fundamental physical vulnerability: the extreme weakness of the signal by the time it reaches the Earth's surface.

GNSS satellites orbit at altitudes of approximately twenty thousand kilometers. They transmit radio signals with a power output roughly equivalent to a standard car headlight. As these radio waves travel through space, through the Earth's atmospheric layers, and down to the ground, they spread out and lose energy.

By the time a GNSS signal reaches an aircraft's antenna, its power is incredibly low, often sitting well below the ambient electromagnetic noise of the Earth itself. It is only through advanced signal processing and mathematical filtering that the aircraft can extract this faint signal from the background static.

Because the authentic signal is so faint, it is remarkably easy to disrupt. Any low-power radio transmitter on the ground operating on the same frequency band can easily overwhelm the authentic satellite signal, blinding the aircraft's receiver. This physical reality is the root cause of GNSS-denied environments.

Defining the GNSS-Denied Environment

In modern aerospace engineering, a GNSS-Denied environment is defined as any operational airspace where the primary satellite navigation data becomes completely unavailable, severely degraded, or fundamentally untrustworthy.

When an aircraft enters a GNSS-denied state, it can no longer update its absolute global coordinates through satellite trilateration. If the flight control system relies solely on GNSS to maintain stability and position hold, losing this data can lead to immediate drift, fly-aways, or catastrophic loss of control.

GNSS-denied conditions are generally divided into two main categories:

Environmental and Involuntary Degradation

These are non-intentional disruptions caused by the physical surroundings or atmospheric events. In urban canyons (areas surrounded by tall skyscrapers), mountainous terrain, or deep valleys, the physical line of sight between the aircraft and the satellites can be blocked. Furthermore, signals can reflect off buildings or cliff faces before reaching the aircraft. This causes the signal to travel a longer path, tricking the receiver into calculating an incorrect distance. This phenomenon is known as multi-path interference. Severe solar storms affecting the Earth's ionosphere can also distort and delay the signals, causing significant positional errors.

Intentional and Hostile Interferences

These are man-made disruptions designed specifically to deny navigation capabilities to autonomous platforms. This category represents the highest risk for critical operations and defense missions, and it is split into two primary methodologies: Jamming and Spoofing.

Deep Dive into Electronic Interference: Jamming vs. Spoofing

To design effective alternative navigation systems, an engineer must clearly distinguish between the two primary forms of intentional electronic interference. While both result in a GNSS-denied state, their mechanisms and risks are completely different.

GNSS Jamming (Denial of Service)

Jamming is a brute-force electronic attack. A jamming device transmits a high-power, chaotic radio noise signal directly on the designated GNSS frequency bands. Because this noise is significantly stronger than the authentic satellite signals arriving from space, it completely floods the aircraft's receiver antenna.

The aircraft's navigation computer becomes incapable of isolating the true satellite timestamps from the overwhelming background noise. As a result, the receiver loses "lock" on the satellites. From an operational perspective, jamming is an overt attack; the aircraft immediately knows it is being disrupted because its satellite tracking count drops to zero, and the system can trigger an immediate automated emergency protocol.

GNSS Spoofing (Deception Attacks)

Spoofing is a far more sophisticated and dangerous electronic attack. Instead of broadcasting raw noise to blind the aircraft, a spoofing device transmits fake, synthetic GNSS signals that mimic authentic satellite transmissions.

Initially, the spoofer matches the exact frequencies, codes, and power levels of the real satellites currently in the sky. Once the aircraft's receiver locks onto these fake signals, the spoofer slowly increases its transmission power to overpower the real satellites. Step by step, the spoofer begins to alter the timestamps and positional data within the fake signal. Because the changes are introduced gradually, the aircraft's navigation computer does not register a loss of signal. Instead, it believes it is operating normally while calculating a completely false position or velocity. The spoofer can trick the aircraft into believing it is drifting off course due to wind, causing the autopilot to command a corrective maneuver that actually drives the aircraft off its true path, into a restricted area, or directly into the ground. Spoofing is a silent threat because the system can be compromised without triggering standard signal-loss alarms.

Operational Implications and the Need for Dissimilar Redundancy

The reality of GNSS-denied environments has forced a complete shift in how autonomous aircraft systems are designed. Relying on a single source of position data creates a single point of failure that is unacceptable for high-integrity operations, urban air mobility, and critical commercial transport.

When an aircraft transitions into a GNSS-denied state, the flight computer must instantly and seamlessly switch to alternative navigation methods to ensure survival. This requires the implementation of dissimilar redundancy. Dissimilar redundancy means using completely different physical principles and sensor types to calculate the same navigation states. If the primary navigation method (radio waves from space) is blocked or deceived, the aircraft must fall back on internal physics (inertial sensors that feel acceleration and rotation) and external environment perception (cameras that look at visual features, radars that measure terrain contours, or lasers that calculate distances). By combining these independent, non-satellite technologies, the aircraft can maintain full operational autonomy, protect its flight envelope, and safely execute its mission even in the most hostile electromagnetic environments.