Preventing unauthorized resource access related to a compromised token
A system can be used to prevent unauthorized resource access related to a compromised token. The system can receive a cancel request indicating that the compromised token has been compromised. The cancel request can include a time at which the compromised token was compromised. Additionally, the system can remove a related token associated with sensitive data corresponding to the compromised token. The related token can be generated subsequent to the time at which the compromised token was compromised. The system can output a response to an operation processing system to indicate when the related token was last used to deny access to one or more protected resources by preventing an execution of an unauthorized transfer operation. The operation processing system can identify the unauthorized transfer operation based on the response.
1 . A system comprising:
a processor; and
a memory including instructions that are executable by the processor for causing the processor to perform operations comprising:
receiving, by a token management service, a cancel request indicating that a token has been compromised, the cancel request including a time at which the compromised token was compromised;
removing, by the token management service, a related token associated with sensitive data corresponding to the compromised token, the related token being generated subsequent to the time at which the compromised token was compromised; and
outputting, by the token management service, a response indicating when the related token was last used to deny access to one or more protected resources by preventing an execution of an unauthorized transfer operation, wherein the unauthorized transfer operation is identifiable based on the response.
2 . The system of claim 1 , wherein removing the related token comprises adjusting, by the token management service, a token status corresponding to the related token based on the cancel request.
3 . The system of claim 1 , wherein the execution of the unauthorized transfer operation is prevented based on detecting that the unauthorized transfer operation was initiated using the compromised token or the related token.
4 . The system of claim 3 , wherein preventing the execution of the unauthorized transfer operation further comprises removing the unauthorized transfer operation from a processing queue to prevent the unauthorized transfer operation from being executed.
5 . The system of claim 1 , wherein the cancel request is generated to remove the related token that is generated subsequent to the time included in the cancel request, and wherein the cancel request is generated in response to receiving user input from an entity at a user interface outputted for display to the entity.
6 . The system of claim 1 , wherein the time at which the token was compromised is provided to the token management service as a time range based on an estimated value.
7 . The system of claim 1 , wherein the compromised token is a virtual token associated with a software application installed on a mobile device to initiate one or more transfer operations using the mobile device.
8 . A computer-implemented method comprising:
receiving, by a token management service, a cancel request indicating that a token has been compromised, the cancel request including a time at which the compromised token was compromised;
removing, by the token management service, a related token associated with sensitive data corresponding to the compromised token, the related token being generated subsequent to the time at which the compromised token was compromised; and
outputting, by the token management service, a response indicating when the related token was last used to deny access to one or more protected resources by preventing an execution of an unauthorized transfer operation, wherein the unauthorized transfer operation is identifiable based on the response.
9 . The computer-implemented method of claim 8 , wherein removing the related token comprises adjusting, by the token management service, a token status corresponding to the related token based on the cancel request.
10 . The computer-implemented method of claim 8 , wherein the execution of the unauthorized transfer operation is prevented based on detecting that the unauthorized transfer operation was initiated using the compromised token or the related token.
11 . The computer-implemented method of claim 10 , wherein preventing the execution of the unauthorized transfer operation further comprises removing the unauthorized transfer operation from a processing queue to prevent the unauthorized transfer operation from being executed.
12 . The computer-implemented method of claim 8 , wherein the cancel request is generated to remove the related token that is generated subsequent to the time included in the cancel request, and wherein the cancel request is generated in response to receiving user input from an entity at a user interface outputted for display to the entity.
13 . The computer-implemented method of claim 8 , wherein the time at which the token was compromised is provided to the token management service as a time range based on an estimated value.
14 . The computer-implemented method of claim 8 , wherein the compromised token is a virtual token associated with a software application installed on a mobile device to initiate one or more transfer operations using the mobile device.
15 . A non-transitory computer-readable medium comprising program code executable by a processor for causing the processor to perform operations comprising:
receiving, by a token management service, a cancel request indicating that a token has been compromised, the cancel request including a time at which the compromised token was compromised;
removing, by the token management service, a related token associated with sensitive data corresponding to the compromised token, the related token being generated subsequent to the time at which the compromised token was compromised; and
outputting, by the token management service, a response indicating when the related token was last used to deny access to one or more protected resources by preventing an execution of an unauthorized transfer operation, wherein the unauthorized transfer operation is identifiable based on the response.
16 . The non-transitory computer-readable medium of claim 15 , wherein removing the related token comprises adjusting, by the token management service, a token status corresponding to the related token based on the cancel request.
17 . The non-transitory computer-readable medium of claim 15 , wherein the execution of the unauthorized transfer operation is prevented based on detecting that the unauthorized transfer operation was initiated using the compromised token or the related token.
18 . The non-transitory computer-readable medium of claim 17 , wherein preventing the execution of the unauthorized transfer operation further comprises removing the unauthorized transfer operation from a processing queue to prevent the unauthorized transfer operation from being executed.
19 . The non-transitory computer-readable medium of claim 15 , wherein the cancel request is generated to remove the related token that is generated subsequent to the time included in the cancel request, and wherein the cancel request is generated in response to receiving user input from an entity at a user interface outputted for display to the entity.
20 . The non-transitory computer-readable medium of claim 15 , wherein the time at which the token was compromised is provided to the token management service as a time range based on an estimated value.