Alternative to HTTPS access

I have a IP camera that I access remotely via and HTTPS connection w/ an unchangeable login name and complex password. I have changed the device name as not nt devulge the type of device on the login page. While this method is more secure than the standard port 80 the device is still vulnerable to external attack and I dont realy trust the mnufacturer's firemware or security. Is there any way to access this device through a public/private key IP tunnel simular to the WRT console? Can a tunnel be created that would require the remote user to possess the private key and passphrase. I would like to forgo the port forward to the camera and connect via the tunnel as if the device were local. Im thinking a VPN tunnel but how would I point to the IP camera?