1. A breast pad comprising:
a core containing absorbent material; and
a liquid impermeable cover disposed on an outer side of the core;
wherein an inner surface of the core contains a wax-like medicament in a limited region thereof, such that the inner surface allows for absorption into the breast pad through a remaining medicament-free region of the inner surface of the core.
2. The breast pad of claim 1 comprising between about 0.03 and 0.15 grams of medicament.
3. (canceled)
4. The breast pad of claim 1 wherein the medicament-free region comprises between about 30 and 50 percent of a total exposed surface area of the inner surface.
5. (canceled)
6. The breast pad of claim 1 wherein at least about 50 percent of a total exposed surface area of the inner surface is medicament-free.
7. The breast pad of claim 1 wherein the limited region of medicament includes a central portion of the breast pad.
8. The breast pad of claim 7 wherein the medicament is distributed uniformly within the central portion.
9. The breast pad of claim 8 wherein the central portion is surrounded by the medicament-free region.
10. The breast pad of claim 9 wherein the medicament-free region has a width of at least about 15 millimeters.
11. The breast pad of claim 7 wherein the central portion includes both medicament and medicament-free areas.
12. The breast pad of claim 1 wherein the medicament is in the form of a coating on the inner surface.
13. The breast pad of claim 1 wherein the medicament is in the form of a dispersion on the inner surface.
14-17. (canceled)
18. The breast pad of claim 1 wherein the medicament comprises lanolin.
19. A breast pad comprising:
an inner surface for contacting a mammary gland;
wherein the inner surface has a first region with a wax-like medicament and a second region that is free of wax-like medicaments; and
wherein the second region is permeable to fluids and permits absorption of mammary into the breast pad.
20. The breast pad of claim 19 comprising between about 0.03 and 0.15 grams of medicament.
21. (canceled)
22. The breast pad of claim 19 wherein the region that is free of wax-like medicaments comprises between about 30 and 50 percent of a total exposed surface area of the inner surface.
23. (canceled)
24. The breast pad of claim 19 wherein at least about 50 percent of a total exposed surface area of the inner surface is the region that is free of wax-like medicaments.
25. The breast pad of claim 19 wherein the medicament is in the form of a coating on the inner surface.
26. The breast pad of claim 19 wherein the medicament is in the form of a dispersion on the inner surface.
27-29. (canceled)
30. The breast pad of claim 19 wherein the medicament comprises lanolin.
31. A method of absorbing mammary fluids while soothing skin, the method comprising
providing a breast pad having an inner surface with a first region containing a wax-like medicament, and a second region that is free of wax-like medicaments and is permeable to permit absorption of mammary fluid into the pad; and
placing the breast pad on a human mammary gland, with the first region contacting at least a portion of an areola of the mammary gland and the permeable second region contacting the mammary gland for absorption of fluids.
32. The method of claim 31 wherein the first region of the inner surface comprises between about 0.03 and 0.15 grams of medicament.
33. The method of claim 31 wherein the first region of the inner surface is fluid impermeable.
34. The method of claim 31 wherein the medicament comprises lanolin.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A method for encryption key management, the method comprising:
accepting authenticated unencrypted data into a processor of a server computing device, wherein the processor is configured as a private key secure processor vault, the operation of which is isolated from other components of the server computing device, thereby preventing unauthorized access to the processor and the data contents therein;
encrypting the authenticated unencrypted data based on an existing private key stored in the processor, thereby converting it to encrypted data; and
transmitting the encrypted data out of the processor.
2. The method of claim 1, wherein the authenticated unencrypted data is identified by a label represented by one or more bits included in the authenticated unencrypted data, and the label is removed before the authenticated unencrypted data is encrypted.
3. The method of claim 1, wherein the processor is one of a plurality of synergistic processor cores integrated within a multi-core processor supervised by a primary processor core.
4. The method of claim 1, wherein transmitting the encrypted data includes transmitting the encrypted data to a client computing device via a communications network.
5. The method of claim 1, wherein, prior to encrypting the authenticated unencrypted data, the authenticated unencrypted data is processed by the execution of a program code also contained within the processor.
6. The method of claim 1, further comprising monitoring the entry of the authenticated unencrypted data into the processor and the exit of the encrypted data from the processor to insure a one-to-one correspondence of data-flow through the processor.
7. The method of claim 1, wherein the authenticated unencrypted data includes a re-key instruction to replace the existing private key, the method further comprising:
generating a new private key;
encrypting the new private key based on the existing private key; and
transmitting the encrypted new private key to a client computing device via a communications network.
8. The method of claim 7, further comprising:
accepting the encrypted new private key into a processor of the client computing device;
decrypting the encrypted new private key with the existing private key, thereby obtaining the new private key;
replacing the existing private key stored on the client computing device with the new private key; and
destroying the existing private key stored on the client computing device.
9. The method of claim 7, further comprising:
monitoring for the receipt of an acknowledgment transmitted from the client computing device to the server computing device to acknowledge the replacement of the existing private key with the new private key on the client computing device;
assuming, in response to not receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was unsuccessful and issuing a new re-key instruction from the server computing device to replace the existing private key; and
assuming, in response to receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was successful and destroying the existing private key in the processor of the server computer device.
10. A system for encryption key management, comprising:
a server computing device including a processor configured as a private key secure processor vault that operates in isolation from other components of the server computing device, thereby preventing unauthorized access to the processor and the data contents therein;
an encryption module operating within the processor and configured to accept authenticated unencrypted data into the processor, encrypt the authenticated unencrypted data to convert it to encrypted data, and transmit the encrypted data out of the processor; and
a key module operating within the processor in communications with the encryption module and configured to provide encryption key data to the encryption module for the encryption of the authenticated unencrypted data.
11. The system of claim 10, wherein:
the encryption module is further configured to accept authenticated unencrypted data that includes a re-key instruction to replace an existing private key, encrypt a new private key based on the existing private key, and transmit the encrypted new private key to a client computing device via a communications network; and
the key module is further configured to generate the new private key and provide existing private key data to the encryption module for encryption of the new private key.
12. The system of claim 11, wherein the client computing device includes a processor configured to accept the encrypted new private key, decrypt the encrypted new private key with the existing private key to obtain the new private key, replace the existing private key stored on the client computing device with the new private key, and destroy the existing private key stored on the client computing device.
13. The system of claim 11, wherein the key module is further configured to destroy the existing private key, and the system further comprises a monitoring module operating within the processor and configured to:
monitor for the receipt of an acknowledgment transmitted from the client computing device to the server computing device to acknowledge the replacement of the existing private key with the new private key on the client computing device;
assume, in response to not receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was unsuccessful and cause the server computing device to issue a new re-key instruction to replace the existing private key; and
assume, in response to receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was successful and signal the key module to destroy the existing private key in the processor of the server computer device.
14. The system of claim 10, further comprising a monitoring module configured to monitor the entry of the authenticated unencrypted data into the processor and the exit of the encrypted data from the processor to insure a one-to-one correspondence of data-flow through the processor.
15. A computer program product for encryption key management, comprising a computer usable medium having a computer readable program, wherein the computer readable program, when executed on a computer, causes the computer to:
accept authenticated unencrypted data into a processor of the computer, wherein the processor is configured as a private key secure processor vault, the operation of which is isolated from other components of the computer, thereby preventing unauthorized access to the processor and the data contents therein;
encrypt the authenticated unencrypted data based on an existing private key stored in the processor, thereby converting it to encrypted data; and
transmit the encrypted data out of the processor to a client computing device via a communications network.
16. The computer program product of claim 15, wherein the authenticated unencrypted data is identified by a label represented by one or more bits included in the authenticated unencrypted data, and the computer readable program, when executed on the computer, further causes the computer to remove the label from the authenticated unencrypted data.
17. The computer program product of claim 15, wherein the processor is one of a plurality of synergistic processor cores integrated within a multi-core processor supervised by a primary processor core.
18. The computer program product of claim 15, wherein the computer readable program, when executed on the computer, further causes the computer to monitor the entry of the authenticated unencrypted data into the processor and the exit of the encrypted data from the processor to insure a one-to-one correspondence of data-flow through the processor.
19. The computer program product of claim 15, wherein the authenticated unencrypted data includes a re-key instruction to replace the existing private key, and the computer readable program, when executed on the computer, further causes the computer to:
generate a new private key;
encrypt the new private key based on the existing private key; and
transmit the encrypted new private key to the client computing device via the communications network.
20. The computer program product of claim 19, wherein the computer readable program, when executed on the computer, further causes the computer to:
monitor for the receipt of an acknowledgment transmitted from the client computing device to the server computing device to acknowledge the replacement of the existing private key with the new private key on the client computing device;
assume, in response to not receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was unsuccessful and issue a new re-key instruction to replace the existing private key; and
assume, in response to receiving the acknowledgment, that the replacement of the existing private key with the new private key on the client computing device was successful and destroy the existing private key in the processor of the computer.