I have nervous, becouse some people look on my hands any time. But probably I have found solution. After user auth first time(and it been logged), it should to select four record in talbe 9x9 . If they prompt correct(or maybe incorrect too) password, system display table 9x9 filed with randomly generated digits. User next been asked for input digits from record, which thier sets after first login time. Of course, all digit must be a lot of repeaten on the table. For ex. :
(I would use table 4x4):
1 2 3 1
2 3 1 4
1 2 4 3
1 1 2 2
If user have selected (1,1) , (2,1) , (2,2) , (4,3) , he should now type : 1 2 3 3 .
It's very good solution. We can login on a lot of eyes more time and don't change us password(this is very dangerouss). If we turn our computer in this sittuation and lost security device, nobody get acces.
What do you think?
We can also using images(ex. animals).