Apparatus and method for secure router device

Abstract

Method, systems, and devices for providing a multi-function router. A router may receive and forward data packets at a physical network interface. The router may also run a virtualized server or router using a logical network interface mapped statically or dynamically to the physical network interface.

1 . A device comprising:
 a processor configured to run a first virtual machine, wherein the first virtual machine is configured to establish a first IP security (IPSEC) Virtual Private Network (VPN) and receive data, apply a first encryption to the data thereby generating one-layer encrypted data, and send the one-layer encrypted data to a first set of ports; and   the processor is further configured to run a second virtual machine, wherein the second virtual machine is configured to establish a second IPSEC VPN and receive the one-layer encrypted data at the first set of ports, apply a second encryption to the one-layer encrypted data thereby generating two-layer encrypted data, and send the two-layer encrypted data to a second set of ports.   
     
     
         2 . The device of  claim 1 , wherein the processor is further configured to run Router Firmware Virtualization Infrastructure (RFVI) for the first virtual machine or the second virtual machine. 
     
     
         3 . The device of  claim 1 , wherein the device sends the two-layer encrypted data connected over the internet to a remote second device via the second set of ports. 
     
     
         4 . The device of  claim 1 , wherein the device receives the data from an external source, or an internal source, wherein the external source comprises a computer, a laptop, a tablet, a cell phone, a cellular base station, wherein the internal source includes a keyboard of the device, a USB port of the device, or a network port of the device. 
     
     
         5 . The device of  claim 1 , wherein the device comprises a set of physical ports mapped to a set of logical ports, wherein the mapping is static or dynamic. 
     
     
         6 . The device of  claim 1 , wherein the first virtual machine or the second virtual machine implements a virtual server, router, or switch to control the sending and receiving of any data. 
     
     
         7 . The device of  claim 1 , wherein the device is a laptop, a computer, a smartphone, or a tablet. 
     
     
         8 . The device of  claim 1 , wherein a set of physical ports includes the first set of ports, wherein a set of logical ports includes the second set of ports. 
     
     
         9 . The device of  claim 1 , wherein the first set of ports include a wired connection and the second set of ports include a wireless connection. 
     
     
         10 . The device of  claim 1 , wherein the device is a component of an apparatus, wherein the apparatus is a laptop, a computer, a smartphone, or a tablet. 
     
     
         11 . A method implemented by a device, the method comprising:
 establishing, by a first virtual machine running on the device, a first IP security (IPSEC) Virtual Private Network (VPN) and receive data;   applying, by the first virtual machine running on the device, a first encryption to the data thereby generating one-layer encrypted data;   sending, by the first virtual machine running on the device, the one-layer encrypted data to a first set of ports;   establishing, by a second virtual machine running on the device, a second IPSEC VPN and receive the one-layer encrypted data at the first set of ports,   applying, by the second virtual machine running on the device, a second encryption to the one-layer encrypted data thereby generating two-layer encrypted data, and   sending, by the second virtual machine running on the device, the two-layer encrypted data to a second set of ports.   
     
     
         12 . The method of  claim 11 , wherein the processor is further configured to run Router Firmware Virtualization Infrastructure (RFVI) for the first virtual machine or the second virtual machine. 
     
     
         13 . The method of  claim 11 , wherein the device sends the two-layer encrypted data connected over the internet to a remote second device via the second set of ports. 
     
     
         14 . The method of  claim 11 , wherein the device receives the data from an external source, or an internal source, wherein the external source comprises a computer, a laptop, a tablet, a cell phone, a cellular base station, wherein the internal source includes a keyboard of the device, a USB port of the device, or a network port of the device. 
     
     
         15 . The method of  claim 11 , wherein the device comprises a set of physical ports mapped to a set of logical ports, wherein the mapping is static or dynamic. 
     
     
         16 . The method of  claim 11 , wherein the first virtual machine or the second virtual machine implements a virtual server, router, or switch to control the sending and receiving of any data. 
     
     
         17 . The method of  claim 11 , wherein the device is a laptop, a computer, a smartphone, or a tablet. 
     
     
         18 . The method of  claim 11 , wherein a set of physical ports includes the first set of ports, wherein a set of logical ports includes the second set of ports. 
     
     
         19 . The method of  claim 11 , wherein the first set of ports include a wired connection and the second set of ports include a wireless connection. 
     
     
         20 . The method of  claim 11 , wherein the device is a component of an apparatus, wherein the apparatus is a laptop, a computer, a smartphone, or a tablet.