Abstract
With the escalating prevalence of in-band interference, the vulnerability of global navigation satellite system (GNSS) receivers to potential jamming or spoofing threats has become a critical concern. The proliferation of GNSS repeaters, commonly known as meaconers (electronic devices that intercept, amplify, and subsequently rebroadcast GNSS signals), contributes to this threat landscape by compromising the accuracy, availability, continuity, and integrity of nearby GNSS receivers. This paper investigates the impact of a meaconer on a GNSS receiver when the received satellite signals are in the multipath situation. The multipath situation is the situation in which a meaconing GNSS signal affects the tracking of the authentic GNSS signal, as if the receiver were exposed to a strong classical multipath. This paper characterizes and bounds the estimated carrier-to-noise ratio (C/N0) and tracking loop outputs in the multipath situation. Then, this paper identifies the geometrical conditions under which a satellite is affected by meaconing multipath. Finally, extensive simulations validate the mathematical models by comparing the expected C/N0 and tracking loop outputs to highly realistic simulation results. The findings reveal significant distortions in C/N0 for satellites in the multipath situation. In rapid-dynamic scenarios, C/N0 can decrease by up to 20 dB‧Hz, whereas C/N0 distortions may have more complex yet predictable patterns in slow-dynamic scenarios. The delay lock loop outputs are shown to be corrupted by deterministic offsets of up to ±15 m, accompanied by increased standard deviations owing to the degraded tracking performance caused by the meaconer interference.
1 INTRODUCTION
1.1 Context of the Study
As noted by the International Telecommunication Union et al. (2024) and Garcia-Pena et al. (2020), the increasing occurrence of in-band interference may render global navigation satellite system (GNSS) receivers susceptible to jamming or spoofing threats, potentially compromising their performance. The proliferation of GNSS repeaters, commonly referred to as meaconers, contributes to this threat landscape. Meaconers are electronic devices that capture electromagnetic signals around a GNSS frequency via a first receiving antenna, then amplify the received signals with a specific gain, and finally broadcast back the amplified signals through a second emitting antenna. Each receiver within the line of sight of the meaconer’s emitting antenna receives the signals with a greater delay than that of the authentic GNSS signals directly transmitted by the satellites. This delay is based on the processing time required for amplification within the meaconer and the geometric distance between the emitting antenna and the user’s receiver.
Numerous studies have investigated the general impact of meaconers on GNSS signals. Coulon et al. (2020) first demonstrated through simulations that meaconers can significantly degrade the accuracy and availability of GNSS receivers in their vicinity. Dovis (2015) discussed various types of GNSS interference, including meaconing, jamming, and spoofing, highlighting their potential to disrupt GNSS-dependent systems. Their study revealed that meaconing can induce significant deviations in positional accuracy, leading to substantial errors in navigation and timing information. Dobryakova and Ochin (2014) examined the impact of meaconing on GNSS receiver integrity monitoring, emphasizing its potential to generate hazardous but detectable misleading information. They also noted that meaconing interference, while pervasive, poses serious concerns owing to its capacity to disrupt GNSS-reliant operations.
1.2 Meaconer Description and Impacts
A meaconer is characterized by its gain Gm, intrinsic delay τm, and phase offset θm. In this paper, the meaconer gain Gm is defined as the ratio between the signal power at the meaconer’s receiving antenna input and the signal power at its emitting antenna output. The intrinsic delay τm represents the group delay of the signal between the receiving antenna input and emitting antenna output. The phase offset θm represents the differences in the instantaneous phases between the signal at the emitting antenna input and receiving antenna output. All of these parameters are considered constant and known for a given meaconer.
In Figure 1, the satellite signal is captured by both the meaconer and nearby GNSS receivers. The signal directly transmitted from the satellite to the GNSS receiver is termed the authentic signal (green in the figure), with dSU denoting the propagation distance (i.e., the Euclidean distance between the satellite and the GNSS receiver antenna phase centers). The signal rerouted through the meaconer is termed the meaconer signal (red in the figure), with dSM and dMU representing the distance between the satellite and the meaconer antenna phase centers and the distance between the meaconer and GNSS receiver antenna phase centers, respectively. The total propagation distance of the meaconer signal is dSM + dMU.
Illustration of meaconer effects on nearby GNSS receivers
1.2.1 Mathematical Model of a Meaconer
The GNSS signals rebroadcast by the meaconer have the same structure as the authentic signals received at the user’s GNSS receiver antenna, but they differ in power (owing to the meaconer gain Gm, different space and atmospheric losses, antenna gains, and the environments around the antennas), time delay (resulting from the meaconer intrinsic delay τm, geometrical distance between the two meaconer antennas, different signal propagation times, and antenna hardware biases), carrier frequency, and carrier phase offset (owing to the relative motion between the satellite, meaconer, and user and other propagation effects), as reported by Hussong et al. (2023) and Steindl et al. (2013). Moreover, the meaconer signal contains additional noise, generated by the active components of the meaconer. In this paper, the relative parameters of interest between the authentic signal and the meaconer signal are expressed as follows:
The relative power denoted as Δg represents the ratio between the meaconer signal’s useful power and the authentic signal’s useful power at the user’s antenna output.
The relative noise power spectrum density (PSD), denoted as ΔN, represents the ratio between the actual thermal noise PSD under meaconing interference, divided by the thermal noise PSD that would have been observed without meaconing (if only the authentic signal were received). The thermal noise PSD is measured at the correlator input of the user’s receiver.
The relative delay Δτ represents the difference between the propagation time of the meaconer signal and the propagation time of the authentic signal at the user’s antenna output.
The relative frequency Δf represents the difference between the received carrier frequency of the meaconer signal and the received carrier frequency of the authentic signal at the user’s antenna output.
The relative phase Δθ represents the difference between the received instantaneous phase of the meaconer signal and the received instantaneous phase of the authentic signal at the user’s antenna output.
Meaconer signals share some similarities with classical multipath signals (which have been analyzed, for instance, by He et al. (2011)), as both represent delayed versions of the line-of-sight GNSS signal. However, meaconer signals have a fundamental difference owing to their arbitrarily high relative gain (Δg), whereas classical multipath signals are typically analyzed under the assumption of low relative gain (Δg ≪ 0 dB). This distinction precludes the common small-gain approximation used in traditional multipath studies, necessitating a detailed analysis of meaconing effects without this assumption. Moreover, classical multipaths are often modeled by random processes, as shown by Hu et al. (2023), owing to the unknown nature of their origin, whereas meaconing multipaths can be modeled deterministically when the position and characteristics of the meaconer are known. The predictable properties of the meaconer signal allow one to deterministically derive the impact of the meaconer on the correlator outputs and on the carrier-to-noise ratio (C/N0) estimations.
1.2.2 Classification of Meaconer Impacts at the Correlator Output
Hussong et al. (2023) proposed a classification of meaconer impacts at the correlator output level, laying the mathematical groundwork of meaconing interference from the results of Bamberg et al. (2018) and Peng et al. (2019). For each authentic GNSS signal reaching the user’s GNSS antenna, the impact of the meaconer at the correlator output can be categorized in one of four situations. These four distinct situations are illustrated in Figure 2 and briefly detailed below.
Classification of situations at the correlator output E, P, and L represent the early, prompt, and late correlators, respectively.
In the nominal situation, the receiver is synchronized with the authentic signal parameters, without significant distortion induced by the meaconer.
In the jamming situation, the receiver is synchronized with the authentic signal parameters, and the meaconing peak is significantly distant (in terms of relative delay) and is thus disregarded. Hence, the impact of the meaconer on the correlator outputs is only dictated by the rebroadcast noise of the meaconer signal.
In the spoofing situation, the receiver is synchronized with the meaconing signal parameters (meaconing peak), and the authentic peak is significantly distant (in terms of relative delay) such that the distortion induced by the authentic signal peak on the meaconer signal peak is disregarded.
In the multipath situation, the authentic and meaconer peaks are sufficiently close to each other (in terms of relative delay) to simultaneously affect the synchronization process. This situation is similar to classical multipath interference, where both the authentic signal and a reflection of that authentic signal arrive at the receiver through different paths. The similarity between this interference situation and classical multipath motivated the name of this scenario: the multipath situation. However, this situation differs from classical multipath because the power of the meaconer signal can be arbitrary large; in particular, it can be larger than the authentic signal power. Additionally, the properties of the meaconer signal (power, delay, Doppler, phase) evolve differently than the properties of a classical multipath signal (as discussed in this paper), owing to the different nature of the interfering source – the meaconer.
1.3 Motivation to Characterize the Multipath Situation
The nominal, jamming, and spoofing situations and their cascading impacts on pseudoranges, C/N0, and estimated positions have been extensively analyzed by Hussong et al. (2025). However, the multipath situation remains understudied because of specific scenario designs or assumptions. For instance, in civil aviation applications (Hussong et al., 2023), the distance between the aircraft and meaconer typically ensures that meaconing signals arrive with sufficient delays to avoid the multipath situation.
Characterizing the multipath situation under meaconing is critical. In this situation, both the authentic and meaconer signals simultaneously influence the GNSS receiver’s tracking, potentially causing severe delay lock loop (DLL) degradation. Similar to classical GNSS multipath (He et al., 2011), DLL outputs may exhibit mean errors of up to ±15 m, with standard deviations reaching 6 m. Destructive interference between the two signals can also drastically reduce C/N0 estimations.
In non-aviation scenarios (e.g., static, pedestrian, vehicular), the multipath situation is more likely and warrants further investigation. Indeed, the reduced distance between the meaconer and user could cause the repeated signal to arrive with a smaller delay at the user’s antenna. Studies such as those by Ghizzo et al. (2024, 2025) have characterized DLL distortions and C/N0 degradations as functions of the relative parameters Δη = [Δg, ΔN, Δτ, Δf, Δθ]T presented above. However, these models are challenging to interpret because it is unclear how the relative parameters depend on the scenario and how they can be predicted from the geometry of the user’s environment. A detailed characterization of these conditions could bridge this gap and facilitate the prediction of when, where, and how the multipath situation occurs.
1.4 Objectives of the Study
This study aims to characterize and quantify the impact of meaconing in the multipath situation on DLL outputs and C/N0 estimations through mathematical modeling and realistic simulations. Specifically, this paper:
Derives the GNSS receiver correlator outputs in the presence of meaconing, based on the meaconing signal characteristics, by using state-of-the-art models,
Quantifies DLL output errors and C/N0 degradations under meaconing interference in various configurations,
Establishes a mapping between the multipath situation and user environment geometry, facilitating the prediction and interpretation of meaconing impacts in relation to satellite and meaconer positions, and
Validates these findings through realistic simulations, offering visualizations of meaconer effects for improved understanding.
This paper offers several original contributions. First, this analysis enables the prediction of both the mean and worst impacts of meaconing multipath on a GNSS receiver as a function of the relative parameters. Second, this paper introduces the concept of the multipath cone, a region in which a GNSS receiver is susceptible to meaconing multipath. This paper also presents a mathematical model of the multipath cone and its properties, providing a means to predict when and where a GNSS user will experience multipath and which satellite signals will be affected by multipath errors. Third, this work maps the DLL output errors and C/N0 degradations to the geometry of the user’s environment, enabling users to easily quantify the impact of meaconing multipath on individual satellite signals by considering only the azimuth and elevation angles of the satellites. Finally, this paper validates these findings through highly realistic simulations, demonstrating the actual effects of a meaconer on a user’s GNSS receiver in the multipath situation. These visualizations aid in elucidating the challenges posed by meaconers and the impacts of meaconing multipath.
This paper is organized as follows: Section 1 has introduced the context and categorized the impacts of meaconers on GNSS receivers. Section 2 details mathematical models of DLL outputs and C/N0 estimations under meaconing based on the state of the art. Section 3 introduces the multipath cone concept. Section 4 maps meaconing multipath degradations to user environment geometry. Finally, Section 5 validates these findings through simulations, providing actionable insights into meaconer impacts.
2 MATHEMATICAL MODELS OF GNSS OBSERVABLES IN THE MULTIPATH SITUATION
This section presents the theoretical model of the correlator output, tracking loops, and C/N0 in the multipath situation. The models have been derived in previous works as a function of the relative parameters Δη for Global Positioning System (GPS) L1 C/A. A list of the variables in this paper is provided in Appendix C for a clearer understanding of the presented mathematical models.
2.1 Model of Correlator Outputs
GNSS implements direct-sequence spread spectrum. The received signal is correlated with a local replica controlled by the code and carrier numerically controlled oscillators over the integration time Ti (Hofmann-Wellenhof et al., 1997). Typically, GNSS receivers encompass at least three correlators: the early (ΛE), prompt (ΛP), and late (ΛL) correlators, where the local replicas are shifted in code by –cτ / 2,0, and cτ /2, respectively (cτ is the chip spacing). The correlator output in the presence of meaconing interference has been derived as a function of the tracking errors εη = [ετ, εθ, εf]⊤ and relative parameters Δv by Hussong et al. (2023). The correlator output at epoch k is expressed as the following linear combination:
1
with the nominal and spoofing contributions, Λa and Λs, expressed as follows:
2
Here, ζτ and ζf are the code and frequency synchronization mismatch functions defined by Ghizzo et al. (2024, Equation (7)). Ca is the received signal power, and dk is the navigation message bit (considered constant over the integration time). The noise contribution, Λn, can be defined as Gaussian noise with power Pn, expressed by Ghizzo et al. (2024) as follows:
3
2.2 Model of Tracking Loops
The dynamic behavior of the tracking loops has been modeled by Ghizzo et al. (2025) as a nonlinear system of two difference equations, depending on the relative parameters Δη. This paper focuses on the system’s dynamic value at lock (i.e., where the loop has successfully established and maintains synchronization with the incoming signal dynamics). The tracking errors at lock have been shown to be equivalent to the system’s stable equilibrium (SE) values (ετ, εθ, and εf), being the solutions of this system (without stress error):
4
Dτ and Dθ are the code and phase discriminator outputs, and χf is the phase discriminator difference. Details about these discriminators are provided in Appendix B. These terms can be expressed as follows:
5
The integers p and p' represent the phase and frequency ambiguity, respectively, and we have the following:
6
7
The code tracking error at lock ετ can be found by solving Equation (4) numerically and is presented in Figure 3 (explained hereafter) for GPS L1 C/A signals; the structure is detailed in Appendix B. The tracking error at lock (i.e., the SE) does not represent the actual errors, but rather the tracking error to which the system tries to converge. In slow-dynamic scenarios (i.e., static, pedestrian, car), the SE can be assimilated to the DLL output error in the code pseudorange.
Maximum and mean values of the DLL errors at lock with respect to Δf, Δτ, and Δg, considering for GPS L1 (a) and Δτ, (b) and and Δg.
C/A; wrt: with respect to
Figure 3(a) presents the absolute value of the tracking mean error at lock, when averaged over Δθ uniformly distributed between 0 and 2π, as a function of Δf and Δτ. The results are given for GPS L1 C/A signals. This mean error is a good approximation of the DLL output error found in the code pseudorange estimation, in the situations when Δθ varies more than 2π during Ti (as evidenced in Section 5). Figure 3(a) highlights that the code pseudoranges can be corrupted, with an error of ±11 m for many relative parameter values (mainly when Δτ < 1 chip and when ). Figure 3(b) reports the maximum absolute value of the tracking error at lock. The DLL errors can potentially reach ±15 m when Δτ < 1 chip and and for specific values of Δθ. Particularly when Δf ∈ [1; 10] Hz, large DLL errors are observed, even for a very small relative delay Δτ. Figure 3(c) shows the influence of the relative power Δg on the maximum tracking errors at lock, demonstrating that the largest errors are almost proportional to Δg (on a linear scale).
Overall, Figure 3 shows that the DLL outputs may be corrupted by huge deterministic errors of up to ±15 m under meaconing multipath, especially when Δτ < 1 chip and . When the relative delay Δτ exceeds 1 chip, the deterministic part of the DLL output errors decreases to zero. When the absolute relative Doppler becomes larger than 25 Hz, the deterministic part of the DLL output errors decreases, but might still be significative depending on the error tolerance of the user’s application.
2.3 Impact of Tracking Loop Distortions on C/N0
The expected value of the C/N0 estimate in the multipath situation (determined by the moment method) has been modeled by Ghizzo et al. (2024) as a function of the relative parameters Δη:
8
with:
9
10
where Te is the C/N0 estimation time, is the mean relative phase within Te, and M = Te / Ti is the number of integration periods within Te.
Figure 4 shows the value of Equation (8) as a function of Δf, Δτ, and Δg, with the approximation εη = 0, with a nominal C/N0 of 40 dB‧Hz, Te = 1s, Ti = 20 ms, and still considering GPS L1 C/A signals. Figure 4(a) shows the mean value of the theoretical C/N0, averaged over Δθ uniformly distributed between 0 and 2π (i.e., ). The results are plotted for Δg = ΔN = –3 dB, as a function of Δf and Δτ. This figure demonstrates that when Δτ < 1 chip, C/N0 is significantly degraded (as for the DLL output errors), even for a low received meaconer power. The degradations are mainly observed for , except when Δf is close to zero (), where both authentic and meaconer signals can combine with constructive interference.
Mean and minimum values of the C/N0 estimates (moment method) with respect to Δf, Δτ, and Δg, considering for GPS L1 C/A (a) and Δτ, (b) and Δτ, (c) and Δg.
Figure 4(b) presents the minimum theoretical C/N0value for Δθ varying between 0 and 2π. These results are similar to the mean values shown in Figure 4(a). This similarity indicates that Δθ does not significantly affect the C/N0 estimations, except for small relative Doppler values Δf, when . Additionally, when , the mean C/N0 is marginally affected by meaconing interference, whereas the lowest values show degradations of approximately 10 dB.
Figure 4(c) depicts the mean C/N0 values, averaged over , and for Δτ = 0 chip (as this relative delay produces large C/N0 degradations). C/N0 is plotted against Δf and Δg. Even for a small relative power of Δg = –30 dB, C/N0 is degraded by approximately 3 dB. The degradations exceed 15 dB when Δg>–10 dB and . In all plots, the C/N0 values are symmetrical with respect to Δf.
Overall, Figure 4 shows that the estimated C/N0 can be drastically reduced under meaconing multipath, particularly when Δτ < 1 chip and . This decrease highlights the lack of robustness of the moment method C/N0 estimation under meaconing interference, potentially causing a loss of lock of the GNSS signals.
3 MAPPING OF THE MULTIPATH SITUATION TO THE GEOMETRY
This section aims to determine the geometrical condition under which a satellite signal is received in the multipath situation, in order to better visualize the scenarios producing the multipath situation for a given satellite. Indeed, the relative parameters Δη are useful for modeling C/N0 and the DLL outputs, but they cannot provide a clear understanding of the meaconing multipath impacts during real scenarios that are defined based on their geometries. By mapping the multipath situation with respect to the geometry of the user’s environment, this section identifies the geometrical configurations that can lead to the multipath situation.
3.1 Conditions for Observing the Multipath Situation
The multipath situation is dependent on two factors (as illustrated by Figures 3 and 4): the delay condition and the Doppler criterion, defined as follows:
Delay condition - To observe the multipath situation, both the authentic and meaconer peaks must affect the correlators. For GPS L1 C/A, the signal peaks after correlation form a triangle with a width of 2 chips. The early and late correlators are computed at a delay difference of cτ/2 with respect to the prompt correlator. The meaconer peak can only be observed with a delay greater than the authentic peak (i.e., Δτ ≥ 0 s) because the meaconer signal detours before reaching the user GNSS antenna, resulting in a larger propagation time. Assuming that the receiver tracks the authentic peak, the meaconer peak distorts the late correlator if the delay difference between the two peaks is smaller than , where Tc is the chip duration. Conversely, if the receiver tracks the meaconer peak, the authentic peak distorts the early correlator if . Figure 5 displays the correlator outputs in the presence of authentic and meaconer signals. The sum of the authentic and meaconer peaks modifies the correlator values only when , resulting in a new equilibrium different from the nominal equilibrium (as also evidenced by Figure 3). In Figure 5, cτ = Tc for pedagogic reasons (more visible in the illustration), but the remainder of this paper uses cτ = Tc /10 because this value is commonly used in GNSS receivers, as it reduces the tracking estimation error (Van Dierendonck et al., 1992). Larger choices of cτ would cause the same impacts but with larger amplitudes.
FIGURE 5Illustration of the delay condition for observing the multipath situation for GPS L1 C/A signals
Doppler criterion - The C/N0 and DLL outputs strongly depend on the relative Doppler Δf as evidenced by Figures 3 and 4. To observe large multipath errors and C/N0 degradations, the authentic signal and the meaconer signal should have a relative Doppler shift of less than 25 Hz at the user GNSS antenna. Otherwise, the multipath situation causes smaller degradations of the GNSS observables. Whereas the delay condition is mandatory for a signal to be in the multipath situation, the Doppler criterion only indicates the most affected signals among all signals respecting the delay condition and therefore helps to identify the satellite signals experiencing high degradations caused by meaconing multipath.
3.2 Definition of the Geometry in This Study
In this paper, the meaconer impact is computed according to the position of the user relative to the meaconer. This approach allows for better visualization and understanding of the meaconing effects on GNSS receivers. The meaconer impact also depends on the velocities of both the meaconer and the user, as well as the positions of the satellites and the meaconer characteristics. The term geometry refers to the relative position and velocities of the user, the meaconer, and the satellites, as well as the meaconer gain, intrinsic delay, frequency, and phase offsets.
3.3 Mapping of the Delay Condition to the Geometry
The delay condition 𝕄 is defined with respect to the relative parameters as follows:
11
The relative delay Δτ can be expressed as the difference between the meaconer signal propagation time τs and the authentic signal propagation time τa. From Figure 1, the relative delay can be expressed as follows:
12
where c represents the speed of light, τm is the meaconer intrinsic delay, and Δτant accounts for the antenna group delay difference between the authentic τant, a and meaconer τant, s signal delays at the user’s receiver antenna. The expression of At in Equation (33) can be rearranged using the parameters defined in Figure 6 to obtain a geometric mapping of the delay condition. In Figure 6, M' is the orthogonal projection of M onto the line (SU), and O is the orthogonal projection of S onto the line (MU). β1 represents the non-oriented angle between the meaconer and the satellite as seen by the user, and β2 represents the non-oriented angle between the imaginary point O and the satellite as seen by the meaconer. γ1 represents the non-oriented angle between the user and the meaconer as seen by the satellite, and γ2 represents the non-oriented angle between the meaconer and the imaginary point O as seen by the satellite.
Illustration of the satellite (S), meaconer (M), and user (U) in the (SMU) hyperplane, with the authentic signal (green) and the meaconer signal (red)
The objective is to obtain an expression of Δτ that depends only on terms known in the geometry. For this, Δτ is derived in terms of dSU, dMU, and the angle β1. Using the parameters from Figure 6, the relative delay in Equation (33) becomes the following:
13
The computation of (dSM – dSM') is presented in Appendix A, proving that dSM – dSM', ≈ 0 m is an excellent approximation of the difference. Thus, we have the following:
14
By inserting Equation (14) in Equation (11), the delay condition can now be expressed as follows:
15
In particular, if Tmax < τm + Δτant, the delay condition is never satisfied, and the multipath situation is never observed. Furthermore, if the delay condition is always satisfied, and the multipath situation is observed for all visible satellites. Otherwise, for a given geometry, the satellites in the multipath situation 𝐌 are those seen inside a cone with summit U, symmetry axis (UM), and aperture angle βmax given by the following:
16
A representation of the multipath cone 𝕄 depicted by Equation (15) is shown in Figure 7, where the user U is in the air and the meaconer M is on the ground. In this configuration, only some signals are in the multipath situation. These satellite signals are received in a direction close to the direction of the meaconer from the user’s perspective. As the meaconer is often seen with an elevation around 0˚, the signals in the multipath situation are more likely to have low elevations. Moreover, when the user is closer to the meaconer, the multipath cone aperture βmax becomes larger, as illustrated by the two examples on the skyplot in Figure 7(b).
Illustrations of the multipath cone 𝕄 (a) In the (UMS) hyperplane, (b) In a skyplot from the user’s perspective, with two meaconers: τm = 0 s, dM1U = 500m, and dM2U = 6500m.
3.4 Mapping of the Doppler Criterion to the Geometry
As reported by Petovello (2015), the relative Doppler Δf can be expressed as follows:
17
where fs (fa) is the received frequency at the user’s GNSS antenna of the mea-coner (authentic) signal. v represents the velocity vectors, and u denotes the unit direction vectors. λ is the wavelength of the GNSS signal. Note that the receiver clock drift has no impact on the relative Doppler Δf, as it is equally present in fs and fa. As a satellite is seen in almost the same direction from the user’s and from the meaconer’s point of view, uSM ≈ uSU. This approximation leads to the following:
18
The C/N0 degradation and the DLL output distortions in the multipath situation are strongly affected by the absolute value of the Doppler shift . The relative Doppler can be mapped to the geometry to identify the regions 𝔽 of small absolute relative Doppler , where the impact of meaconing multipath is the strongest. The value of fmax can be chosen depending on the tolerated degradations of the DLL outputs and of C/N0. For instance, if an application tolerates 3 m of DLL output error and a 6-dB decrease in the estimated C/N0 caused by meaconing multipath, Figures 3 and 4 show that these degradations are only observed when . In this case, choosing fmax = 25 Hz for region 𝔽 would identify the satellite signals associated with larger potential degradations:
19
20
where is the relative velocity between the user and the meaconer, αU is the non-oriented angle between vMU and uSU, and αM is the non-oriented angle between vMU and uMU, defined as follows:
21
If the relative direction uMU and velocities vMU between the user and the meaconer are fixed, the relative Doppler Δf depends only on the direction of the satellite with respect to the user uSU. Consequently, it is possible to represent the received relative Doppler on a skyplot as a function of the elevation and azimuth angles of uSU. When mapped on a skyplot, the region 𝔽 corresponding to forms a ring perpendicular to the vector vMU (and containing the meaconer location). Three examples of the regions with fm = 0 Hz are shown in Figure 8, for three different positions of the meaconer (shown in red on the sky-plots). These plots highlight the Doppler rings 𝔽 as a function of the elevation and azimuth angles of the received satellite signal. The relative velocity vMU is indicated by a black arrow and is directed eastward (0˚ elevation and 90˚ azimuth) with a velocity norm of vMU = 10 m/s. The relative Doppler does not depend on the distance between the user and the meaconer dMU, but only on the direction vector uMU with respect to the velocity vector vMU. The absolute value of the relative Doppler Δf can reach (in Hz) up to 10 times the value of the relative velocity (in m/s) for GPS L1. The satellites observed far from the meaconer direction and its Doppler ring have a high absolute relative Doppler and are therefore less impacted by multipath distortions (as the magnitudes of the C/N0 degradations and the DLL errors decrease as increases).
Three examples of relative Doppler values Δf as a function of the geometry (vMU = 10 m/s) (a) Meaconer perpendicular to the relative velocity, (b) Meaconer at 135˚ from the relative velocity, (c) Meaconer at 220˚ azimuth and 37˚ elevation.
4 IMPACT OF THE MULTIPATH SITUATION ON DLL OUTPUTS AND C/N0
Section 2 presented the DLL errors at lock and C/N0 estimations as functions of the relative parameters, and Section 3 presented Δτ and Δf with respect to the geometry. By combining these sections, it is possible to map the DLL errors at lock and C/N0 estimations to the geometry. This section provides the impact of the meaconer on the multipath error envelope (i.e., the maximum DLL error in SE in the multipath situation) and on the estimated C/N0, as functions of the satellite elevation and azimuth angles.
For better visualization of the meaconer impact on GNSS observables, the multipath error envelope and estimated C/N0 are plotted on skyplots for specific values of Δg (0 dB or –3 dB) and for three different values of vMU (0 m/s, 5 m/s, and 15 m/s). On each skyplot, the meaconer is observed at an elevation of 0˚ and an azimuth of 180˚ (south), represented by a large red dot. The user is moving at a speed vMU toward an elevation of 0˚ and an azimuth of 90˚ (east) relative to the meaconer. The meaconer impact on a satellite is represented by a color at the corresponding elevation and azimuth angle of the satellite, from the user’s perspective.
All of the skyplots have been computed with dMU = 180 m, τm = Δτant = 0 s, and Tmax = 1.05TC ≈ 307.7 m. Equation (16) shows that βmax ≈ 135˚ in this configuration, indicating that the satellites seen at an angle greater than 135˚ with respect to the meaconer are not in the multipath situation. The non-affected satellites lie in the northern part of the skyplot, depicted by the bold dotted line on each sky-plot. The satellites not affected by multipath are in either the nominal or jamming situation, and their multipath error envelope and C/N0 are computed according to the formulas of Hussong et al. (2023) in these situations. Finally, receiver noise is neglected in the skyplots, in order to represent only the deterministic mean behavior of the GNSS observables in the multipath situation.
4.1 Mapping of the Multipath Error Envelope on Skyplots
Figure 9 presents the meaconer multipath error envelope (MMEE), which represents the maximum code tracking errors at lock, obtained by solving Equation (4), as a function of the satellite elevation and azimuth angles. The MMEEs have been computed for Δg = ΔN = 0 dB and for three different relative velocities vMU = [0, 5, 15] m/s between the meaconer and the user. Even if the received satellite signal power changes as a function of satellite elevation, the ratios AΔg and ΔN remain unchanged. Indeed, both the meaconer and the user view the satellite with the same elevation (as they are close one to each other); thus, they both receive the same power at their antenna input.
Maximum tracking error at lock as a function of the geometry, with Δg = ΔN = 0 dB
The figure highlights significant MMEE values (up to ±15 m) when the emitting satellite is observed in the multipath cone. Only those satellites that are viewed extremely close to the meaconer direction do not show large DLL errors; the remainder of the satellite signals are distorted by the meaconing interference depending on the relative velocity. In the static case, MMEE values are almost constant at ±15 m over the entire skyplot. When the relative velocity vMU increases, the large MMEE values at lock agglomerate around a ring perpendicular to the velocity vector and containing the meaconer direction (shaping the Doppler rings 𝔽 evidenced in Section 3). The errors above 10 m are contained inside the Doppler ring corresponding to fmax = 25 Hz. The remainder of the sky-plot exhibits reduced but still significant DLL errors. In all cases, the errors outside of the multipath situation equal zero, because the receiver noise is neglected in these skyplots.
4.2 Mapping of C/N0 Degradations on Skyplots
Figure 10 shows the minimum C/N0 as a function of the geometry. The minimum value is computed by evaluating C/N0 for all Δθ ∈ [0; 2π] (knowing the satellite elevation and azimuth angles) and taking the smallest result. While Δθ significantly influences the C/N0 estimations for small values of vMU (below 0.1 m/s, corresponding to ), it plays a marginal role for larger values of vMU. Therefore, the results displayed in Figure 10 provide a excellent approximation for dynamic cases of the received C/N0. For the static case, the results show the largest degradation eventually observed.
Minimum as a function of the geometry, with Δg = ΔN = –3 dB
The C/N0 values in Figure 10 are heavily degraded by the presence of the mea-coner in the multipath situation. In this figure, the nominal C/N0 is set at 40 dB‧Hz. Outside of the multipath cone (in the northern part of the skyplots), the nominal/ jamming situation is observed, and C/N0 decreases to approximately 38 dB‧Hz when Δg = ΔN = –3 dB. These values align with the results of Hussong et al. (2023). For the satellites in the multipath situation, the C/N0 degradation exceeds 15 dB‧Hz when Δg = ΔN = –3 dB for almost all satellites in the southern hemisphere when vMU = 5 m/s. When vMU = 15 m/s, these degradations occur for the satellite in the Doppler ring 𝔽 corresponding to fmax = 25 Hz, particularly for satellites that are viewed close to the meaconer direction.
5 VALIDATION OF THE MODELS AND VISUALIZATION OF THE IMPACT THROUGH SIMULATIONS
This section validates the presented models by designing three different scenarios affected by meaconing interference in the multipath situation. The impact computed from the equations presented in this paper is compared to the impact obtained by simulating the scenarios in highly realistic GNSS generation software. Additional details about the software and the methodology used to obtain the results are provided in Appendix D.
5.1 Definition of the Scenarios Under Scrutiny
Three scenarios were designed to represent a static scenario, a pedestrian trajectory, and a car trajectory. The pedestrian and car both pass close to a fixed meaconer on the ground. In each scenario, the same GPS satellite is under scrutiny, and its DLL outputs and estimated C/N0 are monitored.
Figure 11 illustrates the pedestrian and car scenarios. The trajectories are each 1200 m long, with 200 m of the nominal/jamming situation, followed by 800 m where the GPS satellite under scrutiny is inside the multipath cone, and finally 200 m back in the nominal/jamming situation. The meaconer is located 100 m away from the trajectory, with a gain of 76 dB chosen to compensate the free-space losses to ensure that Δg = ΔN = 0 dB when the user is closest to the meaconer. Both the user and the meaconer antennas are omnidirectional, with a gain of 0 dBi in all directions. The meaconer intrinsic delay is set to τm = 0 s, and its phase offset is equal to θm = 0 rad. The only difference between the pedestrian and car scenarios is that the pedestrian travels the 1200 m at 1.4 m/s (in approximately 857 s), whereas the car travels the same distance at 14 m/s (in approximately 86 s).
Illustration of the pedestrian and car trajectories
The relative parameters of both scenarios are displayed in Figure 12. Outside the multipath cone, the relative power and noise PSD remain below -10 dB, and the satellite is in the nominal or jamming situation, producing negligible C/N0 and DLL output distortions, as previously investigated by Hussong et al. (2023). The relative Doppler is positive in the first half of the trajectory because the user is moving toward the meaconer, perceiving the meaconer signal with a higher frequency. Conversely, the relative Doppler is negative in the second half of the trajectory, with the zero-crossing of Δf occurring when the user is closest to the meaconer. The Doppler values are 10 times larger in the car scenario because the car is moving 10 times faster than the pedestrian. Finally, all of the relative parameter curves are almost symmetrical because the user trajectory is symmetric with respect to the meaconer, and the satellite does not move a significant distance during the trajectory duration.
Relative parameters for the pedestrian scenario (top) and car scenario (bottom) (a) Pedestrian scenario, (b) Car scenario.
The static scenario represents a 120-s static user located 100 m from the meaconer (at the “closest point to the meaconer” in Figure 11). The meaconer is activated after 20 s; thus, the first 20 s of the static scenario are in the nominal situation. Similarly, the meaconer is shut down for the last 20 s of the scenario. Between these two time points, the meaconer gain is set to 76 dB to ensure that Δg = ΔN = 0 dB, and the satellite under scrutiny is in the multipath situation for 80 s.
The relative parameters for the static scenario are displayed in Figure 13. The relative distance cΔτ is almost constant but increases slowly (by approximately 1 m, or 5 GPS L1 wavelengths, during the meaconer activation) owing to the satellite’s motion. Because vMU = 0 m/s in this scenario, Equation (18) indicates that Δf ≈ 0 Hz. The exact relative Doppler is indeed extremely close to zero but varies slightly owing to the satellite’s different observation angles with respect to the user and the meaconer (uSM ≈ uSU).
Relative parameters for the static scenario
5.2 Degradation of DLL outputs and C/N0 in the Scenarios Under Scrutiny
The three scenarios were run N times (N = 8000 for the static and car scenarios, N = 800 for the pedestrian scenario) with a Monte Carlo method. Only the random receiver-generated noise changed between the different runs. For each second of the scenarios, the mean value of C/N0 and the mean value and standard deviation of the DLL outputs were computed with the N values available. The results are shown in Figures 14–16. Note that in the third subplots of the figures, the DLL outputs (shown in red on the figures) are the actual DLL errors comprised in the code pseudorange estimations, not the DLL errors at lock as in the previous sections (also plotted in the figures, but in black). Indeed, the DLL errors at lock assume that the loop manages to converge toward its SE, whereas the actual DLL error considers the transient response and the smoothing effect of the loop.
C/N0, DLL standard deviation, and DLL mean values for the static scenario
C/N0, DLL standard deviation, and DLL mean values for the pedestrian scenario
C/N0, DLL standard deviation, and DLL mean values for the car scenario
5.2.1 Impact of the Multipath Situation in the Static Scenario
In the static scenario (Figure 14), the relative Doppler Δf is close to zero; thus, the relative phase Δθ = 2πcΔτ/λ + θm plays a prominent role in the C/N0 and DLL output computation. When Δθ = 0[2π], the authentic and meaconer signals add up constructively, resulting in a higher C/N0 than in the nominal situation. The DLL tracking loops are attracted toward the meaconing signal because of its similarity to the authentic signal, producing a large DLL output mean error. When Δθ = π[2π], the meaconer signal causes destructive interference with the authentic signal, significantly reducing C/N0 (by up to 18 dB‧Hz). The DLL tracking loops are also repelled from the meaconer signal, producing large DLL mean errors in the opposite direction. Additionally, the DLL standard deviations increase when C/N0 is low because a poor signal quality degrades the tracking performance.
The presented models of the theoretical C/N0 and DLL SE are also plotted in black, showing an excellent match to the observed values, validating the models in static situations. Indeed, in static cases, the tracking loops have sufficient time to converge to the SE, because the dynamics are slow. Therefore, the theoretical values at the SE are extremely close to the actual values produced by the GNSS receiver software.
5.2.2 Impact of the Multipath Situation in the Pedestrian Scenario
In the pedestrian scenario, the relative Doppler Δf is large enough ( ) that the C/N0 estimation is mainly driven by the variations in Δg (σd ≠ 0 in Equation (8)). C/N0 suffers steady but significant degradations (decreasing to 18 dB‧Hz when Δg = 0 dB), starting as soon as the user enters the multipath cone. These degradations deteriorate the tracking performance and increase the DLL standard deviations up to 10 times the nominal value. A rapid increase in C/N0 is observed when the user is closest to the meaconer, as (and thus σd ≈ 0). This rapid increase is well reflected by the theoretical model (Figure 4), validating the C/N0 model in pedestrian or slow-motion scenarios.
The DLL SE oscillates owing to rapid variations in Δθ, but the DLL low-pass filter limits rapid variations in DLL output and smooths the DLL SE around its mean value, explaining the mismatch between the SE and simulation results. Still, the SE values shape the observed values of DLL mean outputs, which reach up to 15 m of error when the user is closest to the meaconer. Filtering the SE values through the DLL filter produces the observed simulation results. This filtering process is not shown here, but has been demonstrated by Ghizzo et al. (2025).
5.2.3 Impact of the Multipath Situation in the Car Scenario
In the car scenario, the high velocity between the user and receiver reduces the time spent in the multipath cone. C/N0 is still degraded (decreasing to 18 dB‧Hz when the car is closest to the meaconer), leading to higher DLL standard deviations at that moment. However, the C/N0 reduction and the DLL distortions are not immediately visible when the car enters the multipath situation. Indeed, the large relative Doppler values at the beginning of the multipath situation mitigate the degradations induced by the meaconing interference. The degradations are eventually observed when as the car approaches the meaconer. The multipath situation also induces DLL mean errors of up to 10 m.
The models of C/N0 and DLL mean output values show good conformity to the simulated data. The validation of the developed models exposes the meaconer threat and underscores the degradation of GNSS accuracy (and potentially availability if the receiver loses the lock of the signal) when the meaconer is close to the user and when the multipath situation is observed.
6 CONCLUSION
This study has comprehensively investigated the impact of meaconing interference on GNSS receivers in the multipath situation. The multipath situation under meaconing arises when both the authentic and meaconer signals influence the correlator outputs of the GNSS receiver, leading to C/N0 degradations and DLL output distortions. This paper demonstrates that the multipath situation affects all satellites observed within a cone centered around the meaconer, with the cone’s width depending on the meaconer’s distance and intrinsic delay. Satellites inside this cone are not equally impaired by the multipath interference. The impact is primarily driven by the power and Doppler shift differences between the received authentic and meaconer signals. The most severe C/N0 degradations and DLL output distortions occur when the authentic and meaconer signal powers are similar and when the relative Doppler shift is small. This paper also shows that the relative Doppler is minimal when the satellite is observed near the ring perpendicular to the user’s relative motion and containing the meaconer location. The magnitudes of the C/N0 and DLL output degradations deterministically depend on the geometry between the user, meaconer, and satellite. C/N0 estimations in the multipath situation can easily decrease to 20 dB-Hz, and DLL outputs can exhibit mean errors of ±15 m (with an early-late spacing of cτ = 0.1 Tc). Simulations confirm that satellites in the multipath situation are affected by these degradations, consistent with the models. Such signal distortions could potentially lead to signal lock losses or hazardous position estimations, compromising GNSS accuracy, availability, and integrity. In particular, this paper speculates that meaconers used for indoor GNSS coverage in environments such as metro systems or hangars might unintentionally degrade the GNSS performance of nearby receivers if the multipath situation occurs. To mitigate these risks, the authors propose increasing the intrinsic delay τm of these meaconers beyond Tmax to prevent the multipath situation and preserve GNSS receiver performance. This work paves the path for exploring the impact of meaconers onboard aircrafts (where meaconing multipath is likely to happen), as these impacts can severely impair aircraft receiver performance beyond aviation requirements. Experimental validation of the results presented in this paper could be valuable as future work. The authors could not carry out such experiments, as meaconing is currently prohibited in France.
HOW TO CITE THIS ARTICLE:
Hussong, M., Ghizzo, E., Milner, C., Garcia, A., & Lesouple, J. (2026). Characterization of the multipath situation under meaconing. NAVIGATION, 73 https://doi.org/10.33012/navi.738
ACKNOWLEDGMENTS
This research received no specific grant from any funding agency or from any commercial or not-for-profit sectors.
A | APPENDIX: COMPUTATION OF THE DISTANCE dSM – dSM'
The value of dSM – dSM' can be rearranged using the notation in Figure 6:
22
23
24
25
26
Trigonometric formulas directly give the expressions of dM'U, dOS, and dMM':
27
The Al-Kashi theorem gives the expression of dSM:
28
Finally, the Pythagorean theorem provides an expression of dOM , which can be arranged using Equations (27) and (28) as follows:
29
Inserting Equations (27)–(29) into Equation (26) gives the following:
30
The distance dSU can be computed as a function of the satellite elevation angle (assimilated to β1 in the case where the user is at the same altitude as the meaconer) with the formula of MathWorks, Inc. (2025):
31
where RE is the Earth’s radius and RS is the semi-major axis of the satellite orbit.The numerical values of the difference (dSM – dSM') can then be plotted for different values of dMU as a function of β1. The results are shown in Figure 17 and clearly show that the distance can be approximated to zero (in comparison to the maximum multipath effect distance cTmax ≈ 3308 m).
Numerical values of Equation (30) for three different values of dMU as a function of the elevation angle (assimilated to β1)
B | APPENDIX: SIGNAL PROCESSING AND SIGNAL STRUCTURE PARAMETERS
This appendix provides the signal processing parameters of the GNSS receiver used in the paper, as shown in Table 1.
C | APPENDIX: TABLE OF VARIABLES AND PARAMETERS
This appendix summarizes all of the variables and parameters used in this paper, as shown in Table 2.
D | APPENDIX: SIMULATION SETUP AND PLATFORM
This appendix details the simulation bench and methodology used to carry out the simulations in Section 5. The simulations were performed by following the steps listed below.
1. Generation of the user’s trajectory
The first step of the simulations consists in generating the trajectories of the user’s receivers. The trajectories are defined by series of waypoints generated at a sampling frequency of 50 Hz (a commonly used value for GNSS signal processing in GNSS receivers). The signal processing sampling frequency of 50 Hz (at which the correlator outputs are generated) is not to be confounded with the measurement sampling frequency of 1 Hz at which the measurements (pseudoranges and C/N0 estimation) are generated. Each waypoint contains the three-dimensional position of the user at the corresponding epoch. The authors chose to run the simulations on a straight road located in Toulouse, France, but this choice is arbitrary and does not impact the results.
The static trajectory contains 6001 waypoints (to represents the 120-s duration of the scenario) located at [43.615636˚; 1.380236˚, 152 m] in the latitude, longitude, altitude (LLA)-coordinate frame. The pedestrian scenario contains 42,851 waypoints (to represent the 857-s duration of the scenario) starting at [43.615636˚; 1.380236˚, 152 m] in the LLA-coordinate frame and moving eastward at a constant speed of 1.4 m/s. The car scenario contains 4301 waypoints (to represent the 86-s duration of the scenario) starting at [43.615636˚; 1.380236˚, 152 m] in the LLA-coordinate frame and moving eastward at a constant speed of 14 m/s.
The second step of the simulations consists of generating the position of the meaconer and of the satellite under scrutiny. The meaconer is located at a fixed position on the ground (at an altitude of 152 m), as shown in Figure 11. The satellite positions and velocities are determined from Table 3 hereafter, presenting the orbital elements obtained from the U.S. Coast Guard Navigation Center (2024). After the almanac information had been converted into position and velocities over time for all of the satellites, the authors selected one satellite passing south of the meaconer with an elevation of 67˚. The elevation choice does not play a direct role in the meaconer impact, but a different satellite elevation would produce different relative parameters (in particular, a different relative delay, Doppler, and phase), which would slightly modify the meaconing effects on the estimated C/N0 and DLL outputs. Specifically, the order of magnitude of the degradations would not differ, but the temporal fluctuations of the impact could be offset. Only this satellite was considered for all of the simulations. The exact pseudorandom noise (PRN) and starting time selected do not influence the results, as the results are only analyzed with respect to the relative parameters presented in Figures 12 and 13.
3. Computation of relative parameters
Once the user’s trajectory, meaconer location, and satellite trajectory have been defined at each second during the scenarios, the relative parameters presented in Figures 12 and 13 are computed. The relative Doppler Δf is derived from Equation (17), and the relative gain Δg and delay Δτ are obtained from the formulas of Hussong et al. (2024), recalled hereafter:
32
33
Here, dMA is the Euclidean distance between the meaconer and the user, dSM is the Euclidean distance between the satellite and the meaconer, and dSA is the Euclidean distance between the satellite and the user. Δgant = Δgenv = 0 dB and Δτant = 0 s for the simulations in this paper.
4. Generation of correlator outputs of the user’s receiver
The next step of the simulation consists of generating the correlator outputs Λa and Λs of Equation (1) received from the satellite signal under scrutiny, with the assumption of perfect synchronization, ετ = 0 s, εf = 0 Hz, and εθ rad. This assumption is highly realistic for low-dynamic scenarios (as is the case here). The value of the noise, Λn , is selected as a realization of a Gaussian variable, as given by Equation (3). With a knowledge of the relative parameters at a rate of 50 Hz, the correlator outputs ΛE, ΛP, ΛL can be generated at the same rate in the three scenarios.
5. Generation of simulated measurements
The tracking loops of the user’s GNSS receiver can now be run, using the determined values of the correlator outputs. The discriminators of the tracking loops used for the simulations are the early-minus-late power for the code and the atan discriminator for the phase, described by Teunissen and Montenbruck (2017), respectively, on page 417 and page 475. The discriminator outputs are filtered to reduce noise without substantially impacting the dynamic tracking estimate. The simulations in this paper uses a common loop low-pass filter with a bandwidth of 1 Hz for the code, as described by Teunissen and Montenbruck (2017). The code measurements are kept for each sampling interval of 1 s (one value is kept for each 50 generated values), providing simulated DLL output values at a rate of 1 Hz.
C/N0 is estimated directly from the correlator outputs via the moment method, as reported by Pauluzzi and Beaulieu (2000). The C/N0 estimation time is set to 1 s in the simulations, providing C/N0 estimates at a rate of 1 Hz.
6. Repetition of Monte Carlo simulations
After the measurements have been simulated, the results are stored, and steps 4 and 5 are repeated up to N times for each scenario (N = 8000 for the static and car scenarios, N = 800 for the pedestrian scenario). In the different runs, only the value of the noise at the correlator output Λn in Equation (1) is modified, corresponding to another realization of the Gaussian variable given by Equation (3).
After the three scenarios have been run N times, the mean and standard deviation of the DLL outputs are computed for each epoch with the N corresponding values. The mean of the estimated C/N0 is also computed at each epoch with the N available values. The results are plotted in red in Figures 14–16.
7. Generation of theoretical measurements
The theoretical DLL SE values are computed by solving Equation (4) with a numerical method, with a knowledge of the relative parameters determined in step 3. The results are obtained at a rate of 50 Hz and are plotted in black in Figures 14–16. The theoretical mean value of C/N0 is computed from Equation (8) at a rate of 1 Hz and is also plotted in black in the corresponding figures.
This is an open access article under the terms of the Creative Commons Attribution License, which permits use, distribution and reproduction in any medium, provided the original work is properly cited.
REFERENCES
- ↵Bamberg, T., Appel, M., & Meurer, M. (2018). Which GNSS tracking loop configuration is most robust against spoofing? Proc. of the 31st International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2018), Miami, FL, 3587–3595. https://doi.org/10.33012/2018.15912
- ↵Coulon, M., Chabory, A., Garcia-Pena, A., Vezinet, J., Macabiau, C., Estival, P., Ladoux, P., & Roturier, B. (2020). Characterization of meaconing and its impact on GNSS receivers. Proc. of the 33rd International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2020), 3713–3737. https://doi.org/10.33012/2020.17713
- ↵Dobryakova, L., & Ochin, E. (2014). On the application of GNSS signal repeater as a spoofer. Scientific Journals of the Maritime University of Szczecin, 40(112), 53–57. https://repository.am.szczecin.pl/bitstream/handle/123456789/669/11-zn-am-40-112-dobryakova-ochin-on-theaplication-fina-1-.pdf?sequence=1
- ↵Garcia-Pena, A., Macabiau, C., Novella, G., Julien, O., Mabilleau, M., & Durel, P. (2020). RFI GNSS L5/E5a mask derivation. Proc. of the 33rd International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2020), 188–205. https://doi.org/10.33012/2020.17540
- ↵Ghizzo, E., Garcia-Pena, A., Lesouple, J., Milner, C., & Macabiau, C. (2024). Assessing GNSS carrier-to-noise-density ratio estimation in the presence of meaconer interference. Proc. of the IEEE International Conference on Acoustics, Speech and Signal Processing (ICASSP), 8971–8975. https://doi.org/10.1109/ICASSP48485.2024.10448170
- ↵Ghizzo, E., Hussong, M., Garcia-Pena, A., Lesouple, J., Milner, C., & Macabiau, C. (2025). Assessing spoofer impact on GNSS receivers: Tracking loops [manuscript submitted for publication]. Ecole Nationale de l’Aviation Civile.
- ↵He, Z., Hu, Y., Wu, J., Wang, J., Hou, J., & Wang, K. (2011). A comprehensive method for multipath performance analysis of GNSS navigation signals. 2011 IEEE International Conference on Signal Processing, Communications and Computing (ICSPCC), 1–6. https://doi.org/10.1109/ICSPCC.2011.6061564
- ↵Hofmann-Wellenhof, B., Lichtenegger, H., & Collins, J. (1997). GPS theory and practice. Springer Wien New York.
- ↵Hu, M., Yao, Y., Ge, M., Neitzel, F., Shi, J., Pan, P., & Yang, M. (2023). Random walk multipath method for Galileo real-time phase multipath mitigation. GPS Solutions, 27(2), 58. https://doi.org/10.1007/s10291-023-01397-6
- ↵Hussong, M., Ghizzo, E., Milner, C., & Garcia-Pena, A. (2025). GNSS performance degradation under meaconing in civil aviation: Pseudorange and position models. GPS Solutions, 29(3), 93. https://doi.org/10.1007/s10291-024-01804-6
- ↵Hussong, M., Ghizzo, E., Milner, C., Garcia-Pena, A., & Lesouple, J. (2024). Impact of onboard meaconers on aircraft GNSS receivers. Proc. of the 37th International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2024), Baltimore, MD, 418–450. https://doi.org/10.33012/2024.19862
- ↵Hussong, M., Ghizzo, E., Milner, C., Garcia-Pena, A., Lesouple, J., & Macabiau, C. (2023). Impact of meaconers on aircraft GNSS receivers during approaches.Proc. of the 36th International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2023),Denver, CO, 856–880. https://doi.org/10.33012/2023.19423
- ↵International Telecommunication Union, International Civil Aviation Organization, & International Maritime Organization. (2024). Joint statement on protection of the radio navigation satellite service from harmful interference. Retrieved June 17, 2025, from https://www.itu.int/en/mediacentre/Documents/2025/ICAO-IMO-ITU-Joint-Statement.pdf
- ↵MathWorks, Inc. (2025). Slantrangecircularorbit — calculate slant range or distance between circularly orbiting satellite and ground station [R2024a]. MathWorks. https://fr.mathworks.com/help/satcom/ref/slantrangecircularorbit.html
- ↵Parkinson, B. W., & Spilker, J. J. (1996). Progress in astronautics and aeronautics: Global Positioning System: Theory and applications (Vol. 164). AIAA.
- ↵Pauluzzi, D. R., & Beaulieu, N. C. (2000). A comparison of SNR estimation techniques for the AWGN channel. IEEE Transactions on Communications, 48(10), 1681–1691. https://doi.org/10.1109/26.871393
- ↵Peng, C., Li, H., & Lu, M. (2019). Research on the responses of GNSS tracking loop to intermediate spoofing. Proc. of the 32nd International Technical Meeting of the Satellite Division of the Institute of Navigation (ION GNSS+ 2019), Miami, FL, 943–952. https://doi.org/10.33012/2019.16987
- ↵Petovello, M. (2015). How does a GNSS receiver estimate velocity? Inside GNSS, 14(March/April 2015), 38–41. https://insidegnss.com/auto/marapr15-SOLUTIONS.pdf
- ↵Steindl, E., Dunkel, W., Hornbostel, A., Hättich, C., & Remi, P. (2013). The impact of interference caused by GPS repeaters on GNSS receivers and services. Proc. of the European Navigation Conference (ENC 2013). https://www.researchgate.net/publication/312158775_The_impact_of_interference_caused_by_GPS_Repeaters_on_GNSS_receivers_and_services
- ↵Teunissen, P. J. G., & Montenbruck, O. (2017). Springer handbook of global navigation satellite systems. Springer. https://doi.org/10.1007/978-3-319-42928-1
- ↵U.S. Coast Guard Navigation Center. (2024). GPS NANUs, almanacs, OPS advisories, and SOF. Retrieved December 16, 2024, from https://www.navcen.uscg.gov/gps-nanus-almanacsopsadvisories-sof
- ↵Van Dierendonck, A. J., Fenton, P., & Ford, T. (1992). Theory and performance of narrow correlator spacing in a GPS receiver. Navigation, 39(3), 265–283. https://doi.org/10.1002/j.2161-4296.1992.tb02276.x




![Maximum and mean values of the DLL errors at lock with respect to Δf, Δτ, and Δg, considering Δθ∼u[0,2π]
for GPS L1 (a) |meanΔθ∈[0,2π][ετ]|wrt Δf and Δτ, (b) maxΔθ∈[0,2π][ετ]wrt Δf and Δτ,(c)|meanΔθ∈[0,2π][ετ]|wrt Δf and Δg. C/A; wrt: with respect to](https://navi.ion.org/content/navi/73/1/navi.738/F3.medium.gif)
![Mean and minimum values of the C/N0 estimates (moment method) with respect to Δf, Δτ, and Δg, considering Δθ∼u[0,2π] for GPS L1 C/A (a) meanΔθ∈[0,2π][CΔη]WrtΔf and Δτ, (b) meanΔθ∈[0,2π][CΔη]WrtΔf and Δτ, (c) meanΔθ∈[0,2π][CΔη]WrtΔf and Δg.](https://navi.ion.org/content/navi/73/1/navi.738/F4.medium.gif)




![Maximum tracking error at lock maxΔθ∈[0,2π]|ετ|
as a function of the geometry, with Δg = ΔN = 0 dB](https://navi.ion.org/content/navi/73/1/navi.738/F9.medium.gif)
![Minimum C/N0=minΔθ∈[0,2π]|CΔv|
as a function of the geometry, with Δg = ΔN = –3 dB](https://navi.ion.org/content/navi/73/1/navi.738/F10.medium.gif)










