A system and method for secure group communications is provided. One
embodiment provides a method for implementing a virtual private group
network. The method includes creating a virtual private group definition
on a policy server, establishing a plurality of secure connections
between the policy server and a plurality of group nodes, sending a copy
of the virtual private group definition from the policy server to the
group nodes, sending a shared traffic encryption key from the policy
server to each of the group nodes, and sharing secure communication
information among the group nodes using the shared traffic encryption
key, wherein each group node is included in the virtual private group
definition.