GrIDsure (link to youtube) could work on a phone, make effective use of a touchscreen and would be pretty secure - might be patented though.

Wiki description of GrIDsure here - apparently 100 times more secure than a traditional PIN. A subsequent analysis suggests weaknesses, but the system should still be more than sufficient protection for a handheld device.