A research paper from Google has looked into the difficulties of standard 'forgotten password' personal information verification.