We have a new technical report providing a systematic study of the Persuasive Cued Click-Points (PCCP) graphical password system.
It is available here:
Persuasive Cued Click-Points: Design, implementation, and evaluation of a knowledge-based authentication mechanism