Patent ID: 8752123

Claim:
An apparatus comprising: a memory operable to store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource, the resource requiring data external to the resource; and a processor communicatively coupled to the memory and operable to: receive a resource token indicating a request for access to the resource; receive a first data token indicating a request for the data external to the resource, the first data token generated in response to the request for access to the resource; receive a subject token indicating that at least one of a form of user authentication and a form of device authentication has been completed; receive a network token indicating that at least one form of encryption has been performed, wherein the at least one form of encryption comprises Wi-Fi Protected Access; determine at least one token-based rule based at least in part upon the first data token, the subject token, and the network token, wherein the at least one token-based rule conditions the generation of a second data token upon the processor determining that the at least one form of encryption has been performed and that at least one of the form of user authentication and the form of device authentication has been completed; deny the generation of the second data token if at least one of the at least one form of encryption has not been performed, the at least one form of user authentication has not been completed, and the at least one form of device authentication has not been completed; determine, based at least in part upon the at least one token-based rule, that the second data token representing the data should be generated, wherein: the second data token further represents at least one attribute associated with the data; generate a message indicating the determination that the second data token should be generated; and transmit the message, wherein the second data token is generated in response to receiving the message.