A BlackBerry Patent application filed with the Canadian Intellectual Patent Office points to a new method for a BlackBerry to work within a a Virtual Private Network.

That's not all, but we're talking working within a VPN for secure exchange of real-time data.

You're looking at what I consider the Patent app's key image above.

"But what do all these numbers mean," you ask.

This is one of these cases where the Abstract does a fine job explaining what's goin' on. And what all those numbers and arrows mean.
The Abstract says:

Protection of real-time data such as voice data exchanged as packets between a mobile electronic device (10) end a VPN gateway (122) during a media session over a communications link (130) that includes a wireless network (132). A first VPN connection (136) is established between the mobile electronic device (10) and the VPN gateway (122) through the communications link (130), the first VPN connection (136) using key-based encryption to protect data exchanged therethrough. While the first VPN connection (136) is established, a second VPN connection (138) is established between the mobile electronic device (10) and the VPN gateway (122) through the communications link (130), the second VPN connection (138) using key-based encryption to protect data exchanged therethrough. Real-time data packets are exchanged between the mobile electronic device (10) and the VPN gateway (122) through the second VPN connection (138).