Shipping Is Building an Entirely New Navigation Stack
🔔 Subscribe to ShipUniverse Weekly →
When GPS Becomes Only One Position Source
LEO satellite positioning, cryptographically authenticated GNSS, inertial navigation and independent physical fixes are beginning to sit beside GPS. The future bridge will not ask one receiver where the ship is. It will ask which position can actually be trusted.
For decades the modern bridge has been built around a quiet assumption: satellite-derived position will be available, accurate and sufficiently trustworthy to feed the rest of the ship.
That assumption is breaking. Jamming can remove the position entirely. Spoofing is more dangerous because it can leave the receiver working while changing the answer. The same bad position can then propagate into AIS, ECDIS, integrated bridge systems, track control, timing-dependent equipment and shore-side tracking.
Shipping's response is no longer another GPS receiver. It is a stack of systems designed to authenticate, compare and independently reconstruct position when the normal GNSS answer cannot be trusted.
The architecture is changing from one answer to competing evidence
Receiver says position
Multiple displays can appear independent while actually consuming the same GNSS-derived position upstream.
Sources disagree
Authentication, alternate satellites, inertial prediction and physical navigation evidence provide different ways to challenge the primary fix.
The new navigation stack has at least six layers
Authenticated is not the same as independent
Is this navigation message genuine?
OSNMA verifies that Galileo navigation data originated from Galileo and was not modified. It materially strengthens spoofing detection but does not make a receiver immune to signal denial.
Is there another position entirely?
Iridium PNT uses a separate LEO satellite architecture and authenticated signal, providing an alternative position even when conventional GNSS is disrupted.
Does the physical world agree?
A position built from a different physical mechanism provides the strongest challenge when several digital services share the same upstream dependency.
Höegh Autoliners has moved this from pilot to fleet architecture
PntGuard fleet rollout
The five-year agreement also covers future newbuildings entering the fleet during the contract period.
The backup position does not need to beat GPS at everything
Resilient PNT is a continuity problem. A backup can be less precise than normal GNSS and still be extremely valuable if its answer remains trustworthy when the primary system cannot be trusted.
| Position layer | Normal precision | Spoof resistance | Jamming continuity | Independent failure mode | Current maturity |
|---|---|---|---|---|---|
| Conventional multi-GNSS | Excellent | Limited | Limited | Multiple constellations, but similar weak-signal RF environment | Universal |
| Galileo OSNMA | GNSS-class | Stronger | No | Authentication layer remains part of GNSS | Operational |
| Iridium LEO PNT | Tens of metres class | Authenticated | Strong | Separate constellation and much stronger received signal | Commercial |
| Inertial / dead reckoning | Degrades with time | Independent | Independent | Motion sensing rather than external radio position | Established |
| Radar / visual fixes | Environment dependent | Independent | Independent | Physical observation | Established |
| eLoran / VDES R-Mode | Service dependent | Potentially strong | Independent | Terrestrial radio infrastructure | Developing |
The rest of the stack is arriving on several different clocks
Commercial LEO PNT
Iridium PNT is commercially available and dedicated maritime products are moving into fleet deployments.
Signal authentication
Galileo has demonstrated its first civil position authenticated at both message and ranging-signal level.
UK eLoran timing
The UK Government is targeting an initial sovereign eLoran timing capability.
UK eLoran P+N
Full position and navigation capability is the current UK target.
The stack fails if every layer quietly trusts the same source
Four screens, one coordinate
AIS, ECDIS, radar overlays and fleet tracking can all display the same wrong answer if their data originates from the same compromised GNSS feed.
Authentication mistaken for availability
An authenticated GNSS service can help expose falsification, but authentication cannot force a weak satellite signal through a sufficiently strong jammer.
Backup without bridge integration
An independent position is much less useful if the crew cannot immediately see that the primary source has diverged or does not know which systems consumed the suspect data.
The newest guidance is already telling ships to think in layers
The UK Maritime and Coastguard Agency's MGN 719, published October 1, 2026, tells operators to identify every critical system dependent on external PNT, examine data flows and interfaces, establish interference procedures and verify navigation using independent means where practicable.
It specifically lists radar fixing, visual navigation, celestial navigation, dead reckoning and independent sensor systems as alternatives available now, while identifying eLoran, VDES R-Mode, 5G, automatic visual fixing, automatic celestial fixing and inertial systems as parts of the future resilient-PNT environment.
GPS Spoofing Survival Simulator
Assume the primary GNSS position has become unreliable. Change the threat, vessel environment and navigation stack. The model estimates whether the ship can detect the problem, maintain an independent position reference and avoid turning one satellite failure into a complete navigation failure.
GPS just became untrustworthy. What is left?
The model values independence more heavily than raw sensor count. Three devices consuming the same GNSS source do not count as three independent navigation systems.
Independent sources remain available after conventional GNSS becomes unreliable.
Conventional GNSS should remain suspect until agreement with independent sources is re-established.
We welcome your feedback, suggestions, corrections, and ideas for enhancements.
Please click here to get in touch