Patent ID: 8910290

Claim:
An apparatus comprising: a memory operable to: store a first subject token associated with a user, wherein the first subject token indicates a form of user authentication has been performed by the user; store a second subject token associated with a device, wherein the second subject token indicates a form of device authentication has been performed by the device; store a session token associated with a session, wherein: the form of user authentication and the form of device authentication must be performed in order for the session to be generated; and the session facilitates processing of a transaction, the transaction representing an action taken against a resource during the session; and store a resource token associated with a resource; and a processor operable to: monitor the session; determine that the transaction qualifies for additional monitoring; in response to the determination, generate a tag, the tag being unique to the transaction; associate the tag with the transaction to facilitate tracing of the transaction; add the tag to the first subject token; trace the transaction during the processing of the transaction by following the tag, wherein tracing the transaction allows the steps taken to process the transaction to be recreated; and communicate a message to transfer the transaction to an isolated processing unit in response to the determination that the transaction qualifies for additional monitoring, wherein the isolated processing unit processes the transaction in isolation.