Patent ID: 8898777

Claim:
A computer-implemented method to determine whether user interaction activities are indicative of deceptive actions, comprising: detecting performance of at least one user interaction activity on a computing device in order to detect confidence scheme intrusions into the computing device, wherein the user interaction activity comprises a user receiving a request to grant a remote computing device access to the computing device; logging the performance of the at least one user interaction activity; analyzing a past history of the logged user interaction activities on the computing device to determine a frequency of occurrence of each user interaction activity; assigning a score to the detected at least one user interaction activity, wherein the score is based on the frequency of occurrence in the past of the at least one user interaction activity; determining whether the logged user interaction activity matches a signature, wherein the signature comprises a sequence of at least one user interaction activity; and generating a notification message based on the determination that the logged user interaction activity matches the signature, wherein the notification message comprises a query to the user of whether the user is in communication with another user and whether the other user is requesting that the user grant remote access to the computing device.