Server-mediated management of accessory device sharing

1 . A method comprising:

receiving, by a delegate server, authentication credentials from a first sharee electronic device;

determining, by the delegate server, at least one cryptographic key and metadata accessible to a first sharee corresponding to the received authentication credentials, the metadata defining a set of conditions for a share of location information for an accessory device;

evaluating, by the delegate server, the metadata to determine if the set of conditions are satisfied;

upon determination that the set of conditions are satisfied, sending, by the delegate server, the metadata and the at least one cryptographic key to the first sharee electronic device;

receiving an indication that a second sharee electronic device associated with a second sharee is joining the share of location information for the accessory device; and

after receiving the indication, sending, by the delegate server and to the first sharee device, at least one update for the cryptographic key and the metadata.

2 . The method of claim 1 , wherein the metadata comprises an access policy for access to the location information for the accessory device by the first sharee.

3 . The method of claim 2 , wherein the access policy comprises conditions for the first sharee on obtaining the location information provided to a device location server by the second sharee electronic device established upon acceptance of the share by the first sharee and the second sharee.

4 . The method of claim 1 , wherein the metadata comprises an account identifier for the first sharee and a duration of time for the share.

5 . A method comprising:

sending, to a delegate server and from a second device, an affirmative response to a request to share access to location information for an accessory device in accordance with an access policy, the accessory device paired to an owner device;

receiving, from the delegate server, metadata and at least one cryptographic key, the metadata comprising the access policy;

sending, to a device location server, a request to perform a look up of location information for the accessory device with the at least one cryptographic key, the request comprising the metadata; and

receiving encrypted location information and an encrypted cryptographic key for the encrypted location information for the accessory device in accordance with the access policy.

6 . The method of claim 5 , wherein the access policy comprises conditions on obtaining location information provided to the device location server by the second device established upon acceptance of the request to share by the second device.

7 . A non-transitory machine-readable medium storing instructions to cause one or more processors of a delegate server to perform operations comprising:

receiving, by the delegate server, authentication credentials from a first sharee electronic device;

determining, by the delegate server, at least one cryptographic key and metadata accessible to a first sharee corresponding to the received authentication credentials, the metadata defining a set of conditions for a share of location information for an accessory device;

evaluating, by the delegate server, the metadata to determine if the set of conditions are satisfied;

upon determination that the set of conditions are satisfied, sending, by the delegate server, the metadata and the at least one cryptographic key to the first sharee electronic device;

receiving an indication that a second sharee electronic device associated with a second sharee is joining the share of location information for the accessory device; and

after receiving the indication, sending, by the delegate server and to the first sharee electronic device, at least one update for the cryptographic key and the metadata.

8 . The non-transitory machine-readable medium of claim 7 , wherein the metadata comprises an access policy for access to the location information for the accessory device by the first sharee.

9 . The non-transitory machine-readable medium of claim 8 , wherein the access policy comprises conditions for the first sharee on obtaining the location information provided to a device location server by the second sharee electronic device established upon acceptance of the share by the first sharee and the second sharee.

10 . The non-transitory machine-readable medium of claim 7 , wherein the metadata comprises an account identifier for the first sharee and a duration of time for the share.

11 . A data processing system comprising:

a memory to store instructions for execution; and

one or more processors to execute the instructions stored in the memory, wherein the instructions, when executed cause the one or more processors to:

receive, by a delegate server, authentication credentials from a first sharee electronic device;

determine, by the delegate server, at least one cryptographic key and metadata accessible to a first sharee corresponding to the received authentication credentials, the metadata defining a set of conditions for a share of location information for an accessory device;

evaluate, by the delegate server, the metadata to determine if the set of conditions are satisfied;

upon determination that the set of conditions are satisfied, send, by the delegate server, the metadata and the at least one cryptographic key to the first sharee electronic device;

receive an indication that a second sharee electronic device associated with a second sharee is joining the share of location information for the accessory device; and

after receiving the indication, send, by the delegate server and to the first sharee device, at least one update for the cryptographic key and the metadata.

12 . The data processing system of claim 11 , wherein the metadata comprises an access policy for access to the location information for the accessory device by the first sharee.

13 . The data processing system of claim 12 , wherein the access policy comprises conditions for the first sharee on obtaining the location information provided to a device location server by the second sharee electronic device established upon acceptance of the share by the first sharee and the second sharee.

14 . The data processing system of claim 11 , wherein the metadata comprises an account identifier for the first sharee and a duration of time for the share.

15 . A non-transitory machine-readable medium storing instructions to cause one or more processors of a second electronic device to perform operations comprising:

sending, to a delegate server and from the second electronic device, an affirmative response to a request to share access to location information for an accessory device in accordance with an access policy, the accessory device paired to a first electronic device;

receiving, from the delegate server, metadata and at least one cryptographic key, the metadata comprising the access policy;

sending, to a device location server, a request to perform a look up of location information for the accessory device with the at least one cryptographic key, the request comprising the metadata; and

receiving encrypted location information and an encrypted cryptographic key for the encrypted location information for the accessory device in accordance with the access policy.

16 . The non-transitory machine-readable medium of claim 15 , wherein the access policy comprises conditions on obtaining the location information provided to the device location server by the second electronic device established upon acceptance of the request to share by the second electronic device.