SkyAuth Satellite IoT Security Protocol Released: Defending Low-Earth-Orbit Satellites Against Spoofed Signal Attacks

SkyAuth Satellite IoT Security Protocol Released: Defending Low-Earth-Orbit Satellites Against Spoofed Signal Attacks

The European Space Agency (ESA) and Airbus Defence and Space have jointly released SkyAuth, a satellite-IoT security protocol designed to protect low-Earth-orbit satellite IoT terminals against spoofed-signal and replay attacks.

The protocol uses a physical-layer authentication mechanism. Every legitimate satellite IoT terminal appends a hardware-random-number-generated physical fingerprint to its transmitted signal. The fingerprint is derived from tiny manufacturing variations in the RF front end and is unclonable. The ground station's authentication module verifies fingerprint consistency after reception, with the full verification completed within 20 milliseconds.

During the testing phase, the protocol was deployed simultaneously on Starlink and OneWeb networks for six months. The system identified and blocked more than 4.4 million spoofed-signal attempts in that period, including attacks targeting marine-monitoring terminals, smart-agriculture sensors, and wildfire-warning devices. Jürgen Drescher, head of cybersecurity at ESA, said these attacks have increased sharply over the past two years and require a unified industry response.

Airbus plans to integrate SkyAuth as an optional feature into next-generation satellite IoT modules in the second half of 2026. Chip partners include Nordic Semiconductor and STMicroelectronics.