In-vehicle gateway and key management device

A key management device comprising:

• an update data acquisition unit that receives, from outside a vehicle, update data encrypted with a predetermined key;
• a key acquisition unit that receives a key from outside the vehicle;
• a key storage unit in which the key received by the key acquisition unit is stored;
• and
• a decryption unit that decrypts the update data acquired by the update data acquisition unit based on the key stored in the key storage unit,
• wherein the key acquisition unit is configured to determine whether a storage unit is in a state in which an update is in progress, and to permit the decryption to resume in response to determining that the update is in progress,
• wherein the key acquisition unit confirms the presence or absence of the update data from outside the vehicle in response to a triggering event, the triggering event relating to behavior of the vehicle and being one of activation of the vehicle, stopping of the vehicle, reception of a notification from outside the vehicle, and vehicle periodic processing,
• wherein, after the key acquisition unit confirms the presence of the update data in response to the triggering event and after the key is stored in the key storage unit, the decryption unit pauses decryption of the update data in response to an interruption event differing from the triggering event and resumes decryption of the update data when the interruption event ends,
• wherein, when the key has not been updated before decryption of the update data, the update data acquisition unit transmits a key acquisition request signal after completion of decryption of the update data by the decryption unit,
• wherein, when the key is updated before decryption of the update data is complete, the decryption unit does not pause the decryption in response to the interruption event,
• wherein the in-vehicle gateway is configured to revoke and delete the predetermined key in response to an instruction from outside the vehicle.