2.6.4 — Timing Infrastructure — maturity: live
Precision Industrial Timing
Delivering nanosecond-accurate timing signals from satellite to factory floors, refineries, mines and automated production lines that depend on precise synchronisation.
When a factory's robots, CNC machines, and conveyor systems drift even microseconds apart, yield collapses — sovereign GNSS-disciplined timing closes that gap without depending on a foreign commercial feed.
Modern industrial facilities are more time-sensitive than most engineers realise. Coordinated robot cells, distributed control systems (DCS), industrial Ethernet protocols such as IEEE 802.1AS and PROFINET, and high-speed quality-inspection lines all require timing coherence at the sub-microsecond level. A 50-microsecond slip between a programmable logic controller and its actuator bank can produce defective output or trigger a protective shutdown. Today most plants quietly borrow that timing from civilian GNSS — a single point of failure they do not own, cannot audit and cannot defend.
A sovereign precision-timing constellation changes the calculus entirely. Dedicated L-band or S-band timing signals, broadcast from a walker constellation at 500–600 km, can deliver UTC-traceable timing with better than 20 ns accuracy at ground level. Onboard atomic clocks — caesium or rubidium — hold holdover for hours if a satellite passes out of view, and a constellation geometry engineered for national territory guarantees that at least four satellites are visible at elevation angles above 15° at all times. Authentication codes embedded in the signal prevent spoofing of the kind that disrupted North Sea offshore platforms in 2017 and 2019.
The operational payoff is systemic resilience. Petrochemical plants can synchronise distributed safety instrumented systems (SIS) without relying on internet-delivered NTP or foreign GNSS. Automotive assembly lines can timestamp every step of a vehicle build for traceability and regulatory compliance. Mining operations with autonomous haul trucks can maintain fleet coordination even in GPS-denied pit environments, using pseudolite relays fed from the sovereign signal. Nations that own this infrastructure set their own jamming-response protocols, their own authentication key schedule and their own holdover standards — and they never discover at 2 a.m. that a vendor deprecating a signal format has just taken a refinery offline.
Frequently asked
Why does a factory need nanosecond-level timing — isn't millisecond precision good enough?
Modern industrial automation runs on deterministic fieldbus and time-sensitive networking (TSN) protocols where cycle times can be as short as 250 microseconds. A 1-millisecond timing error is four full cycles of jitter, enough to cause robotic arm collisions, weld defects, or semiconductor lithography misalignment. Sub-microsecond — often sub-100-nanosecond — synchronisation is the hard floor for competitive manufacturing, not a luxury.
Can't we just use network time protocol (NTP) from the internet?
NTP over the public internet typically delivers 10–100 ms accuracy, two to five orders of magnitude worse than industrial requirements. Even boundary-clock NTP within a LAN struggles past 1 ms. IEEE 1588 PTP disciplined by a GNSS grandmaster is the standard industrial answer, delivering sub-microsecond accuracy. Internet NTP is appropriate for log timestamps, not process control.
What happens to our timing if the GNSS signal is lost?
A well-designed system enters 'holdover' mode, where an onboard atomic clock or oven-controlled oscillator (OCXO) maintains the last known frequency. A quality OCXO can hold within ±1 µs for roughly one hour; a chip-scale atomic clock (CSAC) can extend that to 24 hours or more. Sovereign nations that own their satellite infrastructure can also deploy dedicated LEO timing beacons as a backup signal layer, reducing holdover dependency entirely.
How does a sovereign satellite constellation improve on buying GPS-disciplined timing as a service?
GPS is controlled by the US Space Force, which retains the right to degrade or deny service under the Federal Radionavigation Plan. A nation that owns its constellation sets its own availability guarantees, encrypts authentication signals to prevent spoofing, and can prioritise domestic industrial users during a crisis — none of which a commercial reseller of GPS timing can promise. Sovereignty converts a geopolitical dependency into a national utility.
Which industries are most exposed to timing failures?
Semiconductor fabs, automotive body-in-white welding lines, pharmaceutical fill-and-finish lines (GMP batch traceability), power-grid phasor measurement units, and large-format additive manufacturing are all acutely sensitive. In each case, timing errors translate directly into scrap, yield loss, regulatory non-compliance, or safety incidents — not just inconvenience.
What is the typical architecture for sovereign industrial timing from LEO?
A constellation of 12–24 LEO microsatellites broadcasting authenticated timing signals supplements existing GNSS. On the ground, a sovereign-standard GNSS-disciplined grandmaster feeds a PTP domain over a TSN-enabled Ethernet fabric. Critical nodes maintain a CSAC holdover. The sovereign operator manages the signal authentication keys, making selective availability and spoofing attacks far harder.
Is there a certification pathway for timing systems used in regulated manufacturing?
Yes, but it is vertical-specific. Pharmaceutical manufacturers must align with FDA 21 CFR Part 11 and EU GMP Annex 11 for audit-trail timestamps. Aerospace manufacturers reference AS9100D and NADCAP. Power utilities follow IEC 61850-9-3. In all cases, traceability to a national metrology institute (NIST, PTB, BIPM) via an unbroken calibration chain is required, and a sovereign satellite signal can form the anchor of that chain.
How many satellites does a sovereign industrial timing constellation actually need?
Timing signals are far less demanding than navigation — you need visibility, not geometry. A constellation of 12–18 LEO satellites in three or four orbital planes can provide continuous sky coverage with at least two satellites in view above 15° elevation for most mid-latitude industrial zones. Adding ground-based pseudolite repeaters inside facilities reduces the constellation size further.