Patent ID: 7802298

Claim:
A method of protecting a client computer from phishing attacks, the method to be performed in the client computer and comprising: detecting a web page received in the client computer, the web page being received from an external web server computer and being displayed in a web browser in the client computer; determining whether the web page is a sensitive web page that accepts user confidential information for accessing an online financial account; and when the web page is deemed sensitive, prompting a user employing the client computer to confirm that the web page is indeed sensitive by asking the user to select a particular website from a list of predetermined websites that the user wants to access by using the web page, wherein the user is prompted by displaying a message to the user, the message including an option to select the particular website from the list of predetermined websites and an option to indicate that the user is not going to a sensitive website; and after the web page is deemed sensitive and after the user selects the particular website from the list of predetermined websites, determining whether the web page is from the particular website selected by the user from the list of predetermined websites.