Across the 18 satellites now in orbit, nine clocks out of 72 have stopped operating. Three are traditional rubidium devices; six are the more precise hydrogen maser instruments that were designed to give Galileo superior performance to the American GPS network.

Galileo was declared up and running in December. However, it is still short of the number of satellites considered to represent a fully functioning constellation, and a decision must now be made about whether to suspend the launch of further spacecraft while the issue is investigated.

• First four satellites launched were called In Orbit Validation (IOV) platforms
• The next 14 were referred to as Full Operational Constellation (FOC) satellites
• Three of the rubidium clock failures have occurred on Galileo’s FOC satellites
• Five of the hydrogen maser failures have occurred on the IOV spacecraft
• One maser has stopped on an FOC satellite, giving nine failures in total
• Three of the four IOVs are affected; two of the 14 FOC satellites are affected
• Every satellite has two hydrogen maser clocks and two rubidium clocks
• That means a total of 72 atomic clocks are currently in orbit
• All Galileo satellites presently have at least two working clocks

Prof Jan Woerner, the director general of the European Space Agency (ESA), told a meeting with reporters: “Everybody is raising this question: should we postpone the next launch until we find the root cause, or should we launch? You can give both answers at the same time. You can say we wait until we find the solution but that means if more clocks fail we will reduce the capability of Galileo. But if we launch we will at least maintain if not increase the [capability], but we may then take the risk that a systematic problem is not considered. We are right now in this discussion about what to do.”

Still operational
Each Galileo satellite carries two rubidium and two hydrogen maser clocks. The multiple installation enables a satellite to keep working after an initial failure. All 18 spacecraft currently in space continue to operate, but one of them is now down to just two clocks.
Most of the maser failures (5) have occurred on the satellites that were originally sent into orbit to validate the system, whereas all three rubidium stoppages are on the spacecraft that were subsequently launched to fill out the network.

ESA staff at its technical centre, ESTEC, in the Netherlands are trying to isolate the cause the of failures – with the assistance of the clock (Spectratime of Switzerland) and satellite manufacturers (Airbus and Thales Alenia Space; OHB and SSTL). It is understood engineers have managed to restart another hydrogen clock that had stopped.

ESA is also in contact with the Indian space agency which is using the same clocks in its sat-nav system. So far, the Indians have not experienced the same failures.

Mitigating actions
A statement issued by the agency late on Wednesday gave additional details. It appears the rubidium failures “all seem to have a consistent signature, linked to probable short circuits, and possibly a particular test procedure performed on the ground”.

The maser clock failures are said to be better understood, with two likely causes, the second of which has caused most grief. The ESA statement said this second scenario was “related to the fact that when some healthy [hydrogen maser] clocks are turned off for long periods, they do not restart due to a change in clock characteristics”.

Actions are being taken to try to prevent further problems. These involve changing the way clocks are operated in orbit. Clocks about to fly are also likely to be refurbished, and future devices yet to be made will have design changes, the agency says. ESA is hopeful it can still launch the next four satellites in the constellation before the end of the year.

Passive hydrogen maser

Precise timing is at the core of all satellite-navigation systems. Atomic clocks generate the time code that is continuously transmitted to users on the ground to help them fix a position.

The passive hydrogen maser clocks in Galileo are determined to be accurate to one billionth of a second per day, or one second in three million years. This performance ought to contribute to giving users fixes that have errors of a metre or less – significantly better than the standard open service from GPS.

A fully operational Galileo system is regarded as a constellation of 24, split across three orbital planes in the sky. But spares are required also, and with one very early satellite in the constellation already considered very close to complete failure – for different reasons – there needs to be near-continuous production of spacecraft.