Patent ID: 8584202

Claim:
An apparatus comprising: a memory operable to: store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource; and store a plurality of network tokens associated with a network; and a processor communicatively coupled to the memory and operable to: receive a resource token indicating that access to the resource has been requested; determine at least one token-based rule based at least in part upon the resource token; determine, based at least in part upon the first resource token, at least one token-based rule from the plurality of token-based rules, wherein: the at least one token-based rule associates an access value with at least one network token; the access value indicates the risk associated with granting access to the resource over the network; and the at least one token-based rule conditions access to the resource upon the value of the access value; determine that the plurality of network tokens comprises the at least one network token; determine, based at least in part upon the at least one token-based rule, the value of the access value associated with the at least one network token in response to the determination that the plurality of network tokens comprises the at least one network token; determine, based at least in part upon the at least one token-based rule, that the value of the access value is insufficient to grant access to the resource; and determine, in response to the determination that the value of the access value is insufficient to grant access to the resource, that access to the resource over the network should be denied.