The Clavis300 generates and distributes keys, providing more than 10 kb/s secure key bit generation rate at 10 dB link loss. For a standard system, the maximum link loss is 18 dB, which corresponds to about 70 km in distance, depending on fibre quality. A premium system offers up to 24 dB loss (depending on availability). The key refresh rate can be adjusted by an administrator.
As an option, the Clavis300 can also be provided with high-speed LEA encryptor blades integrated in the chassis. A single chassis with 6 slots can therefore include both a QKD system and state-of-the-art link encryptors. If needed additional chassis can be paired with the Clavis300 to host additional encryption blades. Currently the encryptor is based on Korean LEA (Light Encryption Algorithm) ciphers, and allows 4×10 Gbps encryption rate. The encryption processing latency is less than 10 microseconds.
Management And Monitoring Functions
The Clavis300 is controlled through a Command Line Interface or a Local Craft Terminal with GUI. A TL1-based Equipment Management System (EMS) is also provided for central management and monitoring purposes. Through these interfaces, users can set-up: the QKD security parameters (such as session key configuration, connected encryptors IP and IDs, key refresh rates etc..); performance indicators (such as thresholds for monitoring alarms on temperature, voltage levels); and network system parameters (such as X.509 certificates, network addresses, masks, gateways etc…). The system monitors continuously configured parameters and provides alarms and warning information with different severity levels (Minor, Major, Critical) in case thresholds are reached. Users can also monitor in real time the optical alignment and operation failures, acquisition times and lengths of the keys (Raw-Key, Sifted key, Authenticated (Final) Key), key rates, number of key generated and Quantum Bit Error Rate (QBER) through the user interfaces.
The Clavis300 systems are inserted in front of the legacy transport system and encrypt/decrypt all traffic data. For better performance (longer distance and higher key rates), a dark fibre link is recommended for the quantum channel. The Clavis300 can be used in a point-to-point configuration or as a relay node for long range key distribution, with add/drop functionality
