Patent ID: 8572690

Claim:
An apparatus comprising: a memory operable to: store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource; and store a plurality of tokens; and a processor communicatively coupled to the memory and operable to: receive a first token indicating that access to the resource has been requested by a device, wherein the first token further indicates that the resource is a confidential resource; determine at least one token-based rule based at least in part upon the first token, wherein: the at least one token-based rule conditions access to the resource upon a second token associated with the device; and the second token indicates that the device has been authorized to access the resource; determine that the plurality of tokens includes the second token associated with the at least one token-based rule; generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token; receive a third token indicating an event affecting the risk associated with granting access to the resource; determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token; and terminate the session token in response to the determination that access to the resource should be terminated.