Inspection and rewriting of cryptographically protected data from group VPNs

Logic encoded in one or more tangible media for execution and when execution operable to:

• receive secure network traffic in a device;
• upon determining that the device is a preconfigured member of a group key system, access a previously stored set of keys and a previously assigned role;
• upon determining that the device is not a member of the group key system, request membership in the group key system from a group controller and requesting a role from the group controller, where establishing membership in the group key system includes receiving a set of keys from the group controller and being assigned a role by the group controller, the role being one of a rewriting point, an inspection point, and a validation point;
• and
• selectively process the secure network traffic as one or more of, an inspection point, a rewriting point, and a validation point as controlled by the roles.

A system, comprising:

• means for determining whether a device that receives secure network traffic is a preconfigured member of a group key system;
• means for selectively requesting membership in the group key system from a group controller;
• and
• means for selectively processing the secure network traffic as one or more of, an inspection point, a rewriting point, and a validation point as controlled by one or more roles and in light of one or more keys, where the roles and the keys are provided by the group controller.