Method and apparatus for object transaction session validation

1. An apparatus comprising:

a memory operable to:

store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource; and

store a plurality of tokens; and

a processor communicatively coupled to the memory and operable to:

receive a first token indicating that a transaction associated with the resource has been requested;

determine at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;

determine that the plurality of tokens includes the second token associated with the at least one token-based rule;

generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token; and

allow the transaction in response to the determination that the plurality of tokens includes the second token.

2. The apparatus of claim 1 , wherein the processor is further operable to:

receive a third token indicating an event affecting the risk associated with granting access to the resource;

determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token; and

terminate the session token in response to the determination that access to the resource should be terminated.

3. The apparatus of claim 2 , wherein the processor is further operable to:

determine, prior to terminating the session token, that the transaction is incomplete; and

complete the transaction before terminating the session token.

4. The apparatus of claim 2 , wherein the processor is further operable to

receive a fourth token indicating that the event has been resolved; and

determine, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

5. The apparatus of claim 4 , wherein the processor is further operable to:

determine, prior to terminating the session token, that the transaction is incomplete;

halt the transaction prior to terminating access to the resource; and

continue the transaction after access to the resource has been reestablished.

6. The apparatus of claim 2 , wherein the processor is further operable to:

generate a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmit the decision token.

7. The apparatus of claim 2 , wherein:

the event comprises the detection of an unauthorized access of a device; and

the transaction was requested by the device.

8. The apparatus of claim 1 , wherein generating the session token comprises a hash using the first and second tokens.

9. The apparatus of claim 1 , wherein the processor is further operable to:

generate a decision token indicating that access to the resource should be granted in response to the determination that access to the resource should be granted; and

transmit the decision token.

10. The apparatus of claim 1 , wherein:

the transaction is further associated with the RFID tag of an automobile; and

the automobile requested the transaction.

11. The apparatus of claim 1 , wherein the transaction is a purchase transaction requested by an automobile.

12. A method comprising:

storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;

storing, by the memory, a plurality of tokens;

receiving, by a processor communicatively coupled to the memory, a first token indicating that a transaction associated with the resource has been requested;

determining, by the processor, at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;

determining, by the processor, that the plurality of tokens includes the second token associated with the at least one token-based rule;

generating, by the processor, a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token; and

allowing, by the processor, the transaction in response to the determination that the plurality of tokens includes the second token.

13. The method of claim 12 , wherein the processor is further operable to:

receiving, by the processor, a third token indicating an event affecting the risk associated with granting access to the resource;

determining, by the processor, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token; and

terminating, by the processor, the session token in response to the determination that access to the resource should be terminated.

14. The method of claim 13 , wherein the processor is further operable to:

determining, by the processor, prior to terminating the session token, that the transaction is incomplete; and

completing, by the processor, the transaction before terminating the session token.

15. The method of claim 13 , wherein the processor is further operable to:

receiving, by the processor, a fourth token indicating that the event has been resolved; and

determining, by the processor, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

16. The method of claim 15 , wherein the processor is further operable to:

determining, by the processor, prior to terminating the session token, that the transaction is incomplete;

halting, by the processor, the transaction prior to terminating access to the resource; and

continuing, by the processor, the transaction after access to the resource has been reestablished.

17. The method of claim 13 , wherein the processor is further operable to:

generating, by the processor, a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmitting, by the processor, the decision token.

18. The method of claim 13 , wherein:

the event comprises the detection of an unauthorized access of a device; and

the transaction was requested by the device.

19. The method of claim 12 , wherein generating the session token comprises a hash using the first and second tokens.

20. The method of claim 12 , wherein the processor is further operable to:

generating, by the processor, a decision token indicating that access to the resource should be granted in response to the determination that access to the resource should be granted; and

transmitting, by the processor, the decision token.

21. The method of claim 12 , wherein:

the transaction is further associated with the RFID tag of an automobile; and

the automobile requested the transaction.

22. The method of claim 12 , wherein the transaction is a purchase transaction requested by an automobile.

23. One or more computer-readable non-transitory storage media embodying software that is operable when executed to:

store a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;

store a plurality of tokens;

receive a first token indicating that a transaction associated with the resource has been requested;

determine at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;

determine that the plurality of tokens includes the second token associated with the at least one token-based rule;

generate a session token based at least in part upon the first token and the second token in response to the determination that the plurality of tokens includes the second token; and

allow the transaction in response to the determination that the plurality of tokens includes the second token.

24. The media of claim 23 , wherein the processor is further operable to:

receive a third token indicating an event affecting the risk associated with granting access to the resource;

determine, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token; and

terminate the session token in response to the determination that access to the resource should be terminated.

25. The media of claim 24 , wherein the processor is further operable to:

determine, prior to terminating the session token, that the transaction is incomplete; and

complete the transaction before terminating the session token.

26. The media of claim 24 , wherein the processor is further operable to:

receive a fourth token indicating that the event has been resolved; and

determine, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

27. The media of claim 26 , wherein the processor is further operable to:

determine, prior to terminating the session token, that the transaction is incomplete;

halt the transaction prior to terminating access to the resource; and

continue the transaction after access to the resource has been reestablished.

28. The media of claim 24 , wherein the processor is further operable to:

generate a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmit the decision token.

29. The media of claim 24 , wherein:

the event comprises the detection of an unauthorized access of a device; and

the transaction was requested by the device.

30. The media of claim 23 , wherein generating the session token comprises a hash using the first and second tokens.

31. The media of claim 23 , wherein the processor is further operable to:

generate a decision token indicating that access to the resource should be granted in response to the determination that access to the resource should be granted; and

transmit the decision token.

32. The media of claim 23 , wherein:

the transaction is further associated with the RFID tag of an automobile; and

the automobile requested the transaction.

33. The media of claim 23 , wherein the transaction is a purchase transaction requested by an automobile.