Secure tunnels for the internet of things

A device for the maintenance and creation of security tunnels between IoT devices and IoT cloud servers, comprising:

• a. a router comprising:
• i. an IoT port adapted to wirelessly connect to one or more IoT devices;
• ii. a WAN port adapted to connect to one or more IoT cloud servers;
• iii. a filter separating packets passing through the router from IoT cloud packets that have a destination address of at least one IoT cloud server;
• iv. an agent means for providing one or more services to be administered to a packet entering the agent;
• v. a direct line to the WAN port for the packets passing through;
• vi. a first active service path connected between the IoT filter and the agent;
• vii. a second active service path connected between the agent and the WAN filter, the paths adapted for transmission of the IoT cloud packets;
• viii. a WAN port connected to the WAN filter, adapted to forward the IoT packets;
• and
• b. a configuration agent securely connected to the router, adapted to securely provide configuration information from the IoT cloud to the router,
• wherein the one or more services comprise at least decrypting the packet with a first protocol and re-encrypting the packet with a second protocol.

A smart router having a processor for communication with one or more IoT devices, the processor comprising:

• a. an IoT port adapted to wirelessly connect to the one or more IoT devices;
• b. a WAN port adapted to connect to one or more IoT cloud servers;
• c. an agent providing one or more services to be administered to a packet entering the agent;
• d. an IoT filter separating packets passing through the router from one of the one or more IoT devices that have a destination address of another of the one or more IoT devices;
• e. a first active service path connected between the IoT filter and the agent;
• f. a WAN filter separating packets passing through the router from IoT cloud packets that have a destination address of at least one IoT cloud server;
• g. a direct line to the WAN port for the packets passing through;
• and
• h. a secure connection to a configuration agent to provide configuration information to the agent of the smart router,
• wherein the one or more services to be administered by the agent comprises at least decrypting the packet and re-encrypting the packet.