machine or gives rise to an investigation the machine as having a suspicious ip address 112 fig3 is a flow diagram which shows an alternative embodiment of the invention in which the concept of trust is based upon experience in fig3 a user is logged in 100 when a second login attempt is made 102 in this case the system looks to see if the user action is consistent with system experience 200 for example the system may determine that the machine at which the user is currently logged in is one that the user has used everyday over a period of time and that is therefore a trusted machine while the second login attempt is being made from a less trusted machine i e a machine from which the user has never logged in before it may be that the user is in fact logging in from the second machine legitimately in such case the mechanism outlined in connection with fig2 above can be applied in which the system sends an instant message to the user at the first login to verify that the second login should be permitted 104 thereafter the mechanism is applied as set forth for example in fig2 204 if the user action is consistent with experience then the second login is allowed 202 the concept of experiential trust can be based upon one or more of many factors including the.