Patent ID: 8572688

Claim:
An apparatus comprising: a memory operable to: store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource; and store a plurality of tokens; and a processor communicatively coupled to the memory and operable to: receive, from an entity, a first token indicating that access to the resource has been requested by a device through the entity; determine at least one token-based rule based at least in part upon the first token, wherein: the at least one token-based rule conditions access to the resource upon a second token; and the second token is associated with a subscriber identity module of the device; determine that the plurality of tokens includes the second token associated with the at least one token-based rule; generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token; receive a third token indicating an event affecting the risk associated with granting access to the resource; determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token; terminate the session token in response to the determination that access to the resource should be terminated; generate a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; transmit the decision token to the entity; determine, prior to terminating the session token, an incomplete transaction associated with the resource; and complete the transaction before terminating the session token.