Resilient national timing

Every bank settlement, grid synchronisation and mobile handover depends on GNSS-derived time. One jamming event, one shutter-control decision, one cable cut and the timing layer collapses before anyone notices the navigation is gone.

The dependence this ends: GNSS-derived time as a single point of failure

Timing fails before positioning does

When a GNSS signal is jammed or spoofed, receivers lose accurate time within seconds. Navigation degrades over minutes. But the financial messaging networks, power-grid protection relays and LTE base stations that quietly depend on that one-pulse-per-second signal begin misbehaving almost immediately. The 2016 GPS anomaly over the Korean peninsula disrupted timing receivers across East Asia. The 2024 Baltic jamming episodes, documented by EUROCONTROL, caused timing faults in ground infrastructure well before pilots reported positional errors. Timing is the hidden dependency.

Most governments have not mapped it. A national timing audit typically reveals that the central bank, the national broadcaster, three or four mobile operators and the transmission-system operator all trace their master clocks to the same constellation, often the same constellation operated by a foreign ministry of defence. That is not a risk; it is a single point of failure with a foreign finger on the switch.

What a sovereign timing architecture actually contains

A credible national timing capability has three layers. The first is the physical time scale: one or more atomic clocks (caesium beam or hydrogen maser) held at a national metrology institute or a designated timing centre, disciplined against international UTC through the BIPM comparison process but capable of free-running autonomously for days or weeks with sub-microsecond holdover. The second layer is distribution: a fibre time-transfer network carrying the national time scale to critical infrastructure nodes, using two-way satellite time and frequency transfer (TWSTFT) or White Rabbit protocols over dedicated or leased fibre. The third layer is the broadcast signal: a resilient alternative to GNSS that receivers in the field can use when the constellation signal is absent or untrusted.

The broadcast layer is where space comes in. A LEO timing payload, transmitting on a frequency outside the GNSS bands, can deliver sub-microsecond accuracy to a ground receiver with a known position. Because LEO satellites move fast and the geometry changes rapidly, a single satellite in an inclined orbit can cover a mid-latitude nation multiple times per day. It is not a navigation service; it is a timing signal. The distinction matters for spectrum licensing, for receiver design and for what you are asking your engineers to build.

Complementary to the broadcast signal, GNSS radio-occultation payloads on the same bus can support ionospheric monitoring, which directly improves the accuracy of GNSS-based timing corrections when the primary constellation is available. That dual use makes the payload more defensible in a budget review.

The ambition ladder: pathfinder to programme

A pathfinder starts on the ground. Before a single satellite is procured, a national timing centre must be established or upgraded: atomic clock infrastructure, a UTC comparison capability and a fibre distribution pilot connecting the central bank, the grid operator and the primary telecoms exchange. This groundwork is unglamorous and often underfunded, but it is the only thing that makes a space segment worth building. Pathfinder ground programmes of this type have been delivered by national metrology institutes in Southeast Asia and sub-Saharan Africa for budgets in the low-to-mid single-digit millions of dollars, though costs vary sharply by existing infrastructure.

The space segment comes next. A single demonstration satellite carrying a timing payload in an inclined LEO, combined with two or three ground stations and a national time-scale institution, constitutes a working sovereign timing capability. Small-satellite missions of this class, with a dedicated timing or PNT payload, have publicly reported development and launch costs in the range of ten to thirty million dollars, depending on clock heritage, bus maturity and launch vehicle selection. India's NavIC programme and Japan's QZSS both began with single-satellite demonstrations before constellation funding was approved; the sequencing is instructive.

A full sovereign timing programme adds redundancy: a second or third satellite for continuous coverage, a backup timing centre, and bilateral agreements with neighbouring states to cross-check national time scales. That level of resilience moves the budget into the low hundreds of millions over a decade, consistent with the published expenditure profiles of QZSS and South Korea's KPS planning documents. It also requires spectrum coordination through the ITU, which takes years and should be started at the pathfinder stage.

What you own and what you cannot buy

At handover, the customer holds the atomic clock infrastructure, the ground station network, the satellite bus and payload, the spectrum filing, the source code and documentation for mission control, and a trained national operations team. Satellize's contracts include source-access terms and hardware audit rights agreed before signature; nothing is held back behind a proprietary interface.

The honest limits are these. A single LEO timing satellite provides intermittent coverage, not continuous. At mid-latitudes, a satellite in a 50-degree inclined orbit passes overhead several times per day but is below the horizon for hours at a time. Holdover clocks at ground infrastructure sites bridge those gaps, but they must be maintained and calibrated. A one-satellite programme is a capability, not a service guarantee. Continuous coverage requires three or more satellites in complementary orbital planes, which is a constellation programme with a corresponding budget and timeline.

Fibre time-transfer networks are subject to physical disruption, as the 2022 Tonga cable cut demonstrated. A fully resilient architecture combines fibre, satellite broadcast and local holdover: no single medium is sufficient. Governments that have invested only in the space segment, without upgrading ground-side holdover, have found the space investment underperforms in precisely the scenarios it was built for.

Spectrum, law and the ITU queue

A national timing broadcast on a new frequency requires an ITU filing, coordination with neighbouring administrations and, in many jurisdictions, domestic spectrum legislation that does not yet contemplate a government-operated timing signal. These processes run in parallel with hardware development but they cannot be compressed. Countries that filed for navigation-adjacent spectrum in 2015 are still coordinating. Starting late means either accepting interference risk or waiting.

National space law is the enabling condition. Without a domestic licensing framework, the satellite cannot be registered, the ground stations cannot operate legally and the operators cannot be trained to a recognised standard. Satellize's national-licensing component addresses this directly, but the legislative timeline is set by parliament, not by the programme office. Build that into the schedule from day one.

What this mission is built from

GNSS radio-occultation payloads: Provides ionospheric monitoring data that improves timing-correction accuracy and adds dual-use scientific value to the satellite bus.
Inclined low Earth orbits: Defines the orbital geometry that gives mid-latitude nations multiple daily passes of the timing broadcast satellite at acceptable elevation angles.
In-country data processing: Hosts the national time-scale computation, clock comparison algorithms and distribution network management within sovereign jurisdiction.
National licensing and space law: Establishes the domestic legal framework for satellite registration, ground-station operation and spectrum use that the timing programme requires before launch.

What you end up owning

Atomic clock infrastructure at a designated national timing centre, capable of autonomous UTC holdover
LEO timing satellite (bus, payload, spectrum filing and on-orbit documentation)
Ground station network with uplink, telemetry and time-transfer capability
Fibre time-distribution pilot connecting critical national infrastructure nodes
Mission control software with full source access and audit rights
Trained national operations team qualified to run the timing centre and satellite operations independently
ITU spectrum coordination record and associated national frequency assignment

Handover proceeds in stages: ground infrastructure and timing centre first, satellite operations second, with national staff operating alongside Satellize engineers for a minimum shadowing period before independent certification. After handover, Satellize retains no operational role; optional support contracts for anomaly resolution or constellation expansion are negotiated separately and are not a condition of the original delivery.

Programme parameters

Pathfinder ground phase	National timing centre, UTC comparison link, fibre pilot to 3-5 critical nodes; 18-30 months
Demonstration satellite (pathfinder)	1 LEO satellite, timing payload plus GNSS-RO secondary; inclined orbit 45-55 degrees
Orbit altitude (LEO timing)	Typically 500-600 km; pass duration 8-12 minutes per overhead transit at mid-latitudes
Daily passes (single satellite, mid-latitude)	4-7 passes per ground site; gaps bridged by local holdover clocks
Timing accuracy (broadcast signal, static receiver)	Sub-microsecond with known receiver position; degrades without holdover during passes gaps
Ground stations	Minimum 2 (primary and backup); in-country processing facility co-located with timing centre
Operations team (steady state)	4-8 trained national staff for satellite operations; separate metrology staff for timing centre
Pathfinder to operational timeline	Ground phase 18-30 months; satellite delivery and launch 24-42 months from contract; total 3-5 years
Full programme (continuous coverage)	3+ satellites in complementary planes; timeline extends to 7-10 years from pathfinder start
ITU coordination lead time	Spectrum filing should begin at programme start; coordination typically 3-7 years

Sources

One contract, one accountable engineer

Commissioned as one programme, not a stack of contracts: spacecraft, launch, ground segment, mission control, training and handover are priced together. Source-access terms and audit rights are agreed in writing before signature. Request a national timing audit.