Apparatus and method for performing session validation

A method comprising:

• storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• storing, by the memory, a plurality of tokens;
• receiving, by a processor communicatively coupled to the memory, a first token indicating that access to the resource has been requested;
• determining, by the processor, at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;
• determining, by the processor, that the plurality of tokens includes the second token associated with the at least one token-based rule;
• generating, by the processor, a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token;
• receiving, by the processor, a third token indicating an event affecting the risk associated with granting access to the resource;
• determining, by the processor, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminating, by the processor, the session token in response to the determination that access to the resource should be terminated;
• determining, by the processor, prior to terminating the session token, an incomplete transaction associated with the resource;
• completing, by the processor, the transaction before terminating the session token;
• receiving, by the processor, a fourth token indicating that the event has been resolved;
• determining, by the processor, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished;
• generating, by the processor, a decision token indicating that access to the resource should be granted in response to the determination that the plurality of tokens includes the second token;
• and
• transmitting, by the processor, the decision token.

One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

• store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• store a plurality of tokens;
• receive a first token indicating that access to the resource has been requested;
• determine at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;
• determine that the plurality of tokens includes the second token associated with the at least one token-based rule;
• generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token;
• receive a third token indicating an event affecting the risk associated with granting access to the resource;
• determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminate the session token in response to the determination that access to the resource should be terminated;
• determine, prior to terminating the session token, an incomplete transaction associated with the resource;
• complete the transaction before terminating the session token;
• receive a fourth token indicating that the event has been resolved;
• determine, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished;
• generate a decision token indicating that access to the resource should be granted in response to the determination that the plurality of tokens includes the second token;
• and
• transmit the decision token.