Patent ID: 8572689

Claim:
An apparatus comprising: a memory operable to: store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource; store a plurality of token-based exceptions to the plurality of token-based rules, wherein a token-based exception facilitates access to the resource; and store a plurality of tokens; and a processor communicatively coupled to the memory and operable to: receive a resource token indicating that access to the resource has been requested; determine, based at least in part upon the resource token, at least one token-based exception, wherein: the at least one token-based exception indicates at least one token; and the token-based exception further conditions the grant of access to the resource upon the processor determining that the plurality of tokens comprises the at least one token; determine that the plurality of tokens does not comprise the at least one token; determine, in response to the determination that the plurality of tokens does not comprise the at least one token, that access to the resource should be denied.