Virtual relay device for providing a secure connection to a remote device

A computer program product comprising:

• a non-transitory computer-readable medium comprising:
• code to receive at a router an incoming connection request to open an IPsec tunnel to a shared network from a remote device belonging to a community of interest having a unique key;
• code to initiate a virtual device host, wherein the virtual device host executes a virtual device relay for the remote device;
• code to host the router and the virtual device relay in a virtualized environment;
• code to route, to the virtual device host, data received from the incoming connection;
• code to receive, at the virtual device relay, data from a remote device, the data being encrypted with the unique key;
• and
• code to forward the data to a second host on the shared network having the same community of interest by the virtual device relay, such that the second host can use the unique key to decrypt the data;
• wherein the remote device and the second host can securely communicate through the virtual relay by use of the unique key.

An apparatus, comprising:

• a memory;
• and
• a processor coupled to the memory, in which the processor is configured:
• to receive at a router an incoming connection request to open an IPsec tunnel to a shared network from a remote device belonging to a community of interest having a unique key;
• to initiate a first, virtual device host, wherein the first, virtual device host is configured to executes a plurality of virtual device relays for the remote device, each of the virtual device relays being assigned to one or more communities-of-interest of a plurality of communities-of-interest;
• to host the router and the virtual device relay in a virtualized environment;
• to route to the virtual device host, data received from the incoming connection
• to receive, at the virtual device relay, data from the remote device, the data being encrypted with the unique key;
• and
• to forward the data to a second host on the shared network having the same community of interest by the virtual device relay, such that the second host can use the unique key to decrypt the data,
• wherein the remote device and the second host can securely communicate through the virtual device relay by use of the unique key.