Method and apparatus for third party session validation

A method comprising:

• storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• storing, by the memory, a plurality of tokens;
• receiving, by a processor communicatively coupled to the memory, a first token indicating that access to the resource has been requested by a device;
• determining, by the processor, at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;
• determining, by the processor, the geographic location of the device based on a token in the plurality of tokens;
• determining, by the processor, based on the geographic location of the device, that the second token should be requested from an entity;
• transmitting, by the processor, a request to the entity for the second token;
• receiving, by the processor, the second token from the entity;
• and
• generating, by the processor, a session token based at least in part upon the first token and the second token in response to receiving the second token;
• receiving, by the processor, a third token indicating an event affecting the risk associated with granting access to the resource, wherein the event is at least one of a security breach associated with the entity and the geographic location of the device changing so that the device cannot communicate with the entity;
• determining, by the processor, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminating, by the processor, the session token in response to the determination that access to the resource should be terminated;
• determining, by the processor, prior to terminating the session token, an incomplete transaction associated with the resource;
• and
• completing, by the processor, the transaction before terminating the session token.

One or more computer-readable non-transitory storage media embodying software that when executed by a processor causes the processor to execute operations comprising:

• storing a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;
• storing a plurality of tokens;
• receiving a first token indicating that access to the resource has been requested by a device;
• determining at least one token-based rule based at least in part upon the first token,
• wherein the at least one token-based rule conditions access to the resource upon a second token;
• determining the geographic location of the device based on a token in the plurality of tokens,
• determining, based on the geographic location of the device, that the second token should be requested from an entity;
• transmitting a request to the entity for the second token;
• receiving the second token from the entity;
• and
• generating a session token based at least in part upon the first token and the second token in response to receiving the second token;
• receiving a third token indicating an event affecting the risk associated with granting access to the resource, wherein the event is at least one of a security breach associated with the entity and the geographic location of the device changing so that the device cannot communicate with the entity;
• determining, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;
• terminating the session token in response to the determination that access to the resource should be terminated;
• determining, prior to terminating the session token, an incomplete transaction associated with the resource;
• and
• completing the transaction before terminating the session token.