Method and system for securing a commercial grid network over non-trusted routes

1. A commercial grid network comprising:

a plurality of resource nodes, wherein each resource node in the plurality of resource nodes comprises a processor; and

an administrative node comprising a processor and a computer readable medium, wherein the computer readable medium comprises instructions, which when executed by the processor, perform a method, the method comprising:

receiving a lease request from a client to lease a first resource node selected from the plurality of resource nodes, wherein the client is separated from the first resource node by a first non-trusted route, and

transmitting a first network security key associated with the client to the first resource node,

wherein the first resource node is configured to:

store the first network security key in a network security key repository specific to the first resource node,

establish a first secure network tunnel over the first non-trusted route using the first network security key,

receive a first network packet securely from the client over the first secure network tunnel, and

destroy the first secure network tunnel when a lease term associated with the client and the first resource node expires.

2. The commercial grid network of claim 1 , wherein the first resource node is further configured to:

store a second network key in the network security key repository;

wherein the second network key is associated with a second resource node selected from the plurality of resource nodes, and

wherein the second resource node is separated from the first resource node by a second non-trusted route;

establish a second secure network tunnel over the second non-trusted route using the second network security key;

receive a second network packet securely from the second resource node over the second secure network tunnel; and

destroy the second secure network tunnel when the lease term expires.

3. The commercial grid network of claim 2 , wherein the method further comprises:

generating a multicast group for communicating with the first resource node and the second resource node.

4. The commercial grid network of claim 1 , wherein the first resource node is further configured to:

drop a second network packet arriving on a network route independent from the first secure network tunnel.

5. The commercial grid network of claim 1 , wherein the first resource node is further configured to:

flush the first network security key from the network security key repository when the lease term expires.

6. The commercial grid network of claim 1 , wherein the first secure network tunnel is restricted to at least one selected from the group consisting of a specific protocol utilized by the client and a specific port utilized by the client.

7. A computer readable medium comprising executable instructions to:

receive, by an administrative node in a commercial grid network, a lease request from a client to lease a first resource node selected from a plurality of resource nodes in the commercial grid network, wherein the client is separated from the first resource node by a first non-trusted route;

transmit, by the administrative node, a first network security key associated with the client to the first resource node;

store, by the first resource node, the first network security key in a network security key repository specific to the first resource node;

establish, by the first resource node, a first secure network tunnel over the first non-trusted route using the first network security key;

transmit a first network packet securely between the client and the first resource node over the first secure network tunnel; and

destroy, by the first resource node, the first secure network tunnel when a lease term associated with the client and the first resource node expires.

8. The computer readable medium of claim 7 , further comprising executable instructions to:

store, by the first resource node, a second network key in the network security key repository,

wherein the second network key is associated with a second resource node selected from the plurality of resource nodes, and

wherein the second resource node is separated from the first resource node by a second non-trusted route;

establish a second secure network tunnel over the second non-trusted route using the second network security key;

transmit a second network packet securely between the first resource node and the second resource node over the second secure network tunnel; and

destroy the second secure network tunnel when the lease term expires.

9. The computer readable medium of claim 8 , further comprising executable instructions to:

generate, by the administrative node, a multicast group for communicating with the first resource node and the second resource node.

10. The computer readable medium of claim 8 , wherein establishing the second secure network tunnel is performed when a utilization threshold of the first resource node is satisfied.

11. The computer readable medium of claim 7 , further comprising executable instructions to:

drop, by the first resource node, a second network packet arriving on a network route independent from the first secure network tunnel.

12. The computer readable medium of claim 7 , further comprising executable instructions to:

flush, by the first resource node, the first network security key from the network security key repository when the lease term expires.

13. The computer readable medium of claim 7 , wherein the first secure network tunnel is restricted to at least one selected from the group consisting of a specific protocol utilized by the client and a specific port utilized by the client.