Method and apparatus for third party session validation

1. An apparatus comprising:

a processor;

a memory communicatively coupled to the processor;

a plurality of token-based rules stored in the memory, wherein a token-based rule facilitates access to a resource; and

a plurality of tokens stored in the memory; and

computer instructions stored within the memory;

wherein the processor, when executing the computer instructions stored in the memory:

receives a first token indicating that access to the resource has been requested by a device;

determines at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;

determines the geographic location of the device based on a token in the plurality of tokens;

determines, based on the geographic location of the device, that the second token should be requested from an entity;

transmits a request to the entity for the second token;

receives the second token from the entity; and

generates a session token based at least in part upon the first token and the second token in response to receiving the second token;

receives a third token indicating an event affecting the risk associated with granting access to the resource, wherein the event is at least one of a security breach associated with the entity and the geographic location of the device changing so that the device cannot communicate with the entity;

determines, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;

terminates the session token in response to the determination that access to the resource should be terminated;

determines, prior to terminating the session token, an incomplete transaction associated with the resource, and

completes the transaction before terminating the session token.

2. The apparatus of claim 1 , wherein the processor, when executing the computer instructions stored in the memory further:

generates a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmits the decision token.

3. The apparatus of claim 1 , wherein the processor, when executing the computer instructions stored in the memory further:

receives a fourth token indicating that the event has been resolved;

determines, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

4. The apparatus of claim 3 , wherein the processor, when executing the computer instructions stored in the memory further:

determines, prior to terminating the session token, an incomplete transaction associated with the resource;

halts the transaction prior to terminating the resource token; and

continues the transaction after access to the resource has been reestablished.

5. The apparatus of claim 1 , wherein generating the session token comprises a hash using the first and second tokens.

6. The apparatus of claim 1 , wherein the processor, when executing the computer instructions stored in the memory further:

generates a decision token indicating that access to the resource should be granted in response to receiving the second token; and

transmits the decision token.

7. The apparatus of claim 1 wherein the processor, when executing the computer instructions stored in the memory further determines that the device is in a different country than the apparatus.

8. A method comprising:

storing, by a memory, a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;

storing, by the memory, a plurality of tokens;

receiving, by a processor communicatively coupled to the memory, a first token indicating that access to the resource has been requested by a device;

determining, by the processor, at least one token-based rule based at least in part upon the first token, wherein the at least one token-based rule conditions access to the resource upon a second token;

determining, by the processor, the geographic location of the device based on a token in the plurality of tokens;

determining, by the processor, based on the geographic location of the device, that the second token should be requested from an entity;

transmitting, by the processor, a request to the entity for the second token;

receiving, by the processor, the second token from the entity; and

generating, by the processor, a session token based at least in part upon the first token and the second token in response to receiving the second token;

receiving, by the processor, a third token indicating an event affecting the risk associated with granting access to the resource, wherein the event is at least one of a security breach associated with the entity and the geographic location of the device changing so that the device cannot communicate with the entity;

determining, by the processor, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;

terminating, by the processor, the session token in response to the determination that access to the resource should be terminated;

determining, by the processor, prior to terminating the session token, an incomplete transaction associated with the resource; and

completing, by the processor, the transaction before terminating the session token.

9. The method of claim 8 , further comprising:

generating, by the processor, a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmitting, by the processor, the decision token.

10. The method of claim 8 , further comprising:

receiving, by the processor, a fourth token indicating that the event has been resolved;

determining, by the processor, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

11. The method of claim 10 , further comprising:

determining, by the processor, prior to terminating the session token, an incomplete transaction associated with the resource;

halting, by the processor, the transaction prior to terminating the resource token; and

continuing, by the processor, the transaction after access to the resource has been reestablished.

12. The method of claim 8 , wherein generating the session token comprises a hash using the first and second tokens.

13. The method of claim 8 , further comprising:

generating, by the processor, a decision token indicating that access to the resource should be granted in response to receiving the second token; and

transmitting, by the processor, the decision token.

14. The method of claim 8 , further comprising determining, by the processor, that the device is in a different country than the method.

15. One or more computer-readable non-transitory storage media embodying software that when executed by a processor causes the processor to execute operations comprising:

storing a plurality of token-based rules, wherein a token-based rule facilitates access to a resource;

storing a plurality of tokens;

receiving a first token indicating that access to the resource has been requested by a device;

determining at least one token-based rule based at least in part upon the first token,

wherein the at least one token-based rule conditions access to the resource upon a second token;

determining the geographic location of the device based on a token in the plurality of tokens,

determining, based on the geographic location of the device, that the second token should be requested from an entity;

transmitting a request to the entity for the second token;

receiving the second token from the entity; and

generating a session token based at least in part upon the first token and the second token in response to receiving the second token;

receiving a third token indicating an event affecting the risk associated with granting access to the resource, wherein the event is at least one of a security breach associated with the entity and the geographic location of the device changing so that the device cannot communicate with the entity;

determining, based at least in part upon the at least one token-based rule, that access to the resource should be terminated in response to receiving the third token;

terminating the session token in response to the determination that access to the resource should be terminated;

determining, prior to terminating the session token, an incomplete transaction associated with the resource; and

completing the transaction before terminating the session token.

16. The media of claim 15 embodying software that when executed by the processor further causes the processor to execute operations comprising:

generating a decision token indicating that access to the resource should be terminated in response to the determination that access to the resource should be terminated; and

transmitting the decision token.

17. The media of claim 15 embodying software that when executed by the processor further causes the processor to execute operations comprising:

receiving a fourth token indicating that the event has been resolved,

determining, based at least in part upon the fourth token and the at least one token-based rule, that access to the resource should be reestablished.

18. The media of claim 17 embodying software that when executed by the processor further causes the processor to execute operations comprising:

determining, prior to terminating the session token, an incomplete transaction associated with the resource,

halting the transaction prior to terminating the resource token; and

continuing the transaction after access to the resource has been reestablished.

19. The media of claim 15 , wherein generating the session token comprises a hash using the first and second tokens.

20. The media of claim 15 embodying software that when executed by the processor further causes the processor to execute operations comprising:

generating a decision token indicating that access to the resource should be granted in response to receiving the second token; and

transmitting the decision token.

21. The media of claim 15 embodying software that when executed by the processor further causes the processor to determine that the device is in a different country than the apparatus.