GrIDsure is claiming a breakthrough with "a revolutionary new protected ID verification system (patent pending)" to make Chip and PIN banking more secure. It seems that instead of picking a Personal Identification Number:
Users create a simple pattern by choosing a set number of squares on a grid, in a shape of their choice -- such as an 'L' or a 'tick'. Because the grid is then filled with random numbers at authentication time, new 'PIN' or pass codes are created each time. Best of all, GrIDsure can work without the need for extra hardware such as tokens, generating one-time codes that are more secure and resilient to spyware threats.
The company also claims that the idea "works with ANY device (where a display can be shown) and is therefore ideal for mobile phone-based solutions." Presumably it caters for the fact that mobile phone keypad layouts are different from computer and ATM layouts....
But I must admit I'm sceptical. Seems to me that the number of "memorable" patterns that people will naturally choose is likely to be very much smaller than the number of patterns created by random number generation. And we already rely on "motor memory" to some extent when entering even awkward PINs.
