I have to agree, it's absolutely ridiculous.

Using cardiac patterns for login are also prone to "denial of service attacks". Because if I scare someone, suddenly they will be unable to access their phone.

Regardless, just reading through this patent, I find it difficult/impossible to believe that there isn't prior art for this.