During the Catalyst conference I bumped into three guys from a company called "imagicsoftware". They have a patented system for using biometric typing rhythms to use as an authentication mechanism. When I indicated that this was good but I thought it could be susceptible to a replay attack I was told that this wasn't the case. They have "something in the software" that prevents robotic type attacks.
Assuming, for the moment, that this is true, it offers a possible advancement on the use of passwords and as such should be considered. However, remember that this form of authentication is, in my own personal opinion, open to a man in the middle attack where the criminal simple passes along the authentication. Thus this method as with many other authentication methods still doesn't solve for phishing attacks where the man in the middle passes along the authentication.
Guy
www.authenticationworld.com
guy.huntington@authenticationworld.com
del.icio.us