Method and apparatus for session validation to access third party resources

A method comprising:

• storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• storing, by a memory, a plurality of tokens;
• receiving, by a processor communicatively coupled to the memory, from an entity, a first token indicating that access to the resource has been requested by a device through the entity;
• determining, by the processor, at least one token-based rule based at least in part upon the first token, wherein:
• the at least one token-based rule conditions access to the resource upon a second token;
• and
• the second token is associated with a subscriber identity module of the device;
• determining, by the processor, that the plurality of tokens includes the second token associated with the at least one token-based rule;
• generating, by the processor, a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token;
• receiving, by the processor, a third token indicating an event affecting the risk associated with granting access to the resource;
• determining, by the processor, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminating, by the processor, the session token in response to the determination that access to the resource should be terminated;
• generating, by the processor, a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated;
• transmitting, by the processor, the decision token to the entity;
• determining, by the processor, prior to terminating the session token, an incomplete transaction associated with the resource;
• and
• completing, by the processor, the transaction before terminating the session token.

One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

• store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• store a plurality of tokens;
• receive, from an entity, a first token indicating that access to the resource has been requested by a device through the entity;
• determine at least one token-based rule based at least in part upon the first token, wherein:
• the at least one token-based rule conditions access to the resource upon a second token;
• and
• the second token is associated with a subscriber identity module of the device;
• determine that the plurality of tokens includes the second token associated with the at least one token-based rule;
• generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token;
• receive a third token indicating an event affecting the risk associated with granting access to the resource;
• determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminate the session token in response to the determination that access to the resource should be terminated;
• generate a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated;
• transmit the decision token to the entity;
• determine, prior to terminating the session token, an incomplete transaction associated with the resource;
• and
• complete the transaction before terminating the session token.