1. A method of creating a key protector for a storage volume, the method being implemented in a computing device and comprising:
generating an intermediate key;
protecting, based at least in part on a publicprivate key pair of an entity, the intermediate key;
encrypting based at least in part on the intermediate key, a volume master key for encrypting and decrypting one or more volume encryption keys that are used to encrypt the storage volume; and
storing a key protector for the storage volume, the key protector being associated with the entity and including both the encrypted volume master key and information indicating how to obtain the intermediate key.
2. A method as recited in claim 1, wherein protecting the intermediate key comprises encrypting, based at least in part on a publicprivate key pair of an entity, the intermediate key, and wherein storing the information indicating how to obtain the intermediate key comprises storing the encrypted intermediate key.
3. A method as recited in claim 1, further comprising storing the key protector on the storage volume.
4. A method as recited in claim 1, further comprising:
generating an encrypted intermediate key by encrypting, based at least in part on the volume master key, the intermediate key; and
storing the encrypted intermediate key in the key protector.
5. A method as recited in claim 4, further comprising:
obtaining a new volume master key;
obtaining the intermediate key by decrypting the encrypted intermediate key using the volume master key;
generating a new encrypted volume master key by encrypting, based at least in part on the intermediate key, the new volume master key;
replacing the encrypted volume master key in the key protector with the new encrypted volume master key;
generating a new encrypted intermediate key by encrypting, based at least in part on the new volume master key, the intermediate key; and
replacing the encrypted intermediate key in the key protector with the new encrypted intermediate key.
6. A method as recited in claim 1, the storing further comprising storing, in the key protector, both information identifying a private key of the publicprivate key pair and a protector type identifier that identifies the key protector as being a key protector based on a public key.
7. A method as recited in claim 1, wherein the storage volume comprises a removable flash memory device.
8. A method as recited in claim 1, wherein the entity comprises a user and wherein protecting the intermediate key is based at least in part on a digital certificate of the user obtained when the user is authenticated to the computing device.
9. A method as recited in claim 8, the storing further comprising storing, in the key protector, a certificate identifier that identifies the digital certificate.
10. A method as recited in claim 1, further comprising, in response to receiving a request to access the storage volume:
obtaining a private key of the entity;
obtaining, based at least in part on the private key, the intermediate key; and
using the intermediate key to decrypt the encrypted volume master key for decrypting the one or more volume encryption keys.
11. A method as recited in claim 1, further comprising repeating the generating, the protecting, the encrypting, and the storing for one or more additional key protectors.
12. A method of accessing an encrypted storage volume, the method being implemented in a computing device and comprising:
obtaining a private key of an entity associated with a key protector stored on the encrypted storage volume;
obtaining, based at least in part on the private key, an intermediate key; and
using the intermediate key to decrypt a volume master key from the key protector for decrypting one or more volume encryption keys that are used to decrypt the storage volume.
13. A method as recited in claim 12, wherein the key protector includes an encrypted intermediate key, and wherein obtaining the intermediate key comprises decrypting, based at least in part on the private key, the encrypted intermediate key.
14. A method as recited in claim 12, wherein the key protector is stored in an unencrypted portion of the encrypted storage volume.
15. A method as recited in claim 12, wherein the encrypted storage volume comprises a removable flash memory device.
16. A method as recited in claim 12, wherein the key protector includes an encrypted intermediate key that is encrypted based on the volume master key, the method further comprising:
receiving a new volume master key;
decrypting, based at least in part on the volume master key, the intermediate key from the key protector;
generating a new encrypted intermediate key by encrypting, based at least in part on the new volume master key, the intermediate key;
storing the new encrypted intermediate key in the key protector;
generating a new encrypted volume master key by encrypting, based at least in part on the intermediate key, the new volume master key; and
storing the new encrypted volume master key in the key protector.
17. A method as recited in claim 12, the key protector further including both information identifying a private key of a publicprivate key pair that includes the private key and a protector type identifier that identifies the key protector as being a key protector based on a public key.
18. A method as recited in claim 12, wherein the private key is identified based on a digital certificate, the key protector further including a certificate identifier that identifies the digital certificate.
19. A method as recited in claim 12, the key protector further including a data portion storing a public key of a secondary publicprivate key pair generated in encrypting the intermediate key.
20. One or more computer storage media having stored instructions for accessing an encrypted removable flash memory device that, when executed by one or more processors of a computing device, cause the one or more processors to:
obtain a private key associated with a key protector stored on the encrypted removable flash memory device, the key protector including:
a public key of a publicprivate key pair of the user,
intermediate key information that includes a first encrypted intermediate key resulting from an intermediate key having been encrypted based at least in part on the public key,
an encrypted volume master key resulting from a volume master key having been encrypted based at least in part on the intermediate key,
a second encrypted intermediate key resulting from the intermediate key having been encrypted based at least in part on the volume master key, and
a protector type identifier that identifies the key protector as being a key protector based on a public key;
decrypt, based at least in part on the private key, the first encrypted intermediate key to obtain the intermediate key; and
use the intermediate key to decrypt the encrypted volume master key to obtain the volume master key for decrypting one or more volume encryption keys that are used to decrypt the encrypted removable flash memory device.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
I claim:
1. A wiper cleaning system for cleaning ink residue from a wiper which has wiped ink residue from an inkjet printhead in an inkjet printing mechanism, comprising:
a frame;
a scraper tumbler having a body pivotally supported by the frame and plural scraper bars projecting radially outward from the body member; and
a tumbler advancing mechanism which selectively advances the scraper bars to a scraping position where the wiper is scraped across a positioned one of the scraper bars.
2. A wiper cleaning system according to claim 1 further including:
a reservoir defined by the frame; and
an ink solvent contained within the reservoir to form a solvent bath;
wherein the advancing mechanism selectively advances the scraper bars to a soaking position where at least one of the scraper bars is soaking in the solvent bath.
3. A wiper cleaning system according to claim 2 further including a brush member located to contact at least one of the scraper bars when selectively advanced by the advancing mechanism.
4. A wiper cleaning system according to claim 3 wherein:
the reservoir has an entrance which receives the scraper bars when selectively advanced by the advancing mechanism, and an exit portion through which the scraper bars leave the reservoir when selectively advanced by the advancing mechanism; and
the brush member is located at the reservoir exit portion.
5. A wiper cleaning system according to claim 1 wherein the advancing mechanism comprises a ratchet mechanism which selectively advances the scraper blades through an indexing motion.
6. A wiper cleaning system according to claim 5 wherein said indexing motion of the ratchet mechanism has a ratcheting stroke which selectively advances the scraper bars by one scraper bar position.
7. A wiper cleaning system according to claim 5 further including a moveable platform which supports the wiper, with the platform having a pawl which engages the ratchet mechanism to selectively advance the scraper blades through said indexing motion.
8. A method of cleaning ink residue from an inkjet printhead in an inkjet printing mechanism, comprising the steps of:
providing a wiper and a scraper tumbler having plural scraper bars projecting radially outward therefrom;
wiping ink residue from an inkjet printhead with the wiper;
rotating the scraper tumbler to place one of the scraper bars in a scraping position; and
moving the wiper across said one of the scraper bars to scrape ink residue form the wiper.
9. A method according to claim 8 wherein:
the providing step further includes the step of providing a reservoir filled with an ink solvent contained to form a solvent bath; and
the method further includes the step of selectively soaking at least one of the scraper bars in the solvent bath.
10. A method according to claim 9 wherein:
the providing step further includes the step of providing a brush member; and
the method further includes the step of brushing at least one of the scraper bars during the rotating step.
11. A method according to claim 10 wherein the brushing step follows the soaking step.
12. A method according to claim 8 wherein the rotating step comprises the step of ratcheting scraper tumbler through an indexing motion.
13. A method according to claim 12 wherein said indexing motion selectively advances the scraper bars by one scraper bar position.
14. A method according to claim 12 wherein:
the providing step further includes the step of providing a moveable platform which supports the wiper; and
the rotating step comprises the step of engaging the scraper tumbler with the platform.
15. An inkjet printing mechanism, comprising:
a frame;
an inkjet printhead supported by the frame for movement between printing positions for printing and a servicing position for receiving printhead servicing; and
a wiper which wipes ink residue from the printhead during a wiping stroke when the printhead is in the servicing position;
a platform which supports the wiper for movement through a wiping stroke to wipe the ink residue from the printhead and a scraping stroke;
a scraper tumbler having a body pivotally supported by the frame and plural scraper bars projecting radially outward from the body member; and
a tumbler advancing mechanism which selectively advances the scraper bars to a scraping position where the wiper is scraped across a positioned one of the scraper bars during the scraping stroke.
16. An inkjet printing mechanism according to claim 15, further including:
a reservoir defined by the frame; and
an ink solvent contained within the reservoir to form a solvent bath;
wherein the advancing mechanism selectively advances the scraper bars to a soaking position where at least one of the scraper bars is soaking in the solvent bath.
17. An inkjet printing mechanism according to claim 16 further including a brush member located to contact at least one of the scraper bars when selectively advanced by the advancing mechanism.
18. An inkjet printing mechanism according to claim 15 wherein the advancing mechanism comprises a ratchet mechanism which selectively advances the scraper blades through an indexing motion.
19. An inkjet printing mechanism according to claim 18 wherein said indexing motion of the ratchet mechanism has a ratcheting stroke which selectively advances the scraper bars by one scraper bar position.
20. An inkjet printing mechanism according to claim 18 further including a moveable platform which supports the wiper, with the platform having a pawl which engages the ratchet mechanism to selectively advance the scraper blades through said indexing motion.