This is much closer to the original wording, but it may solve the password problem.
re-authentication
re-authentication processes do not rely upon the user's ability to do any of the following:
memorize information; or
perform calculations, such as including correctly identifying and entering numbers and letters from a character string; or
reliably produce gestures; or
recognize characters presented on screen, and then enter them into an input field; or
speak; or
transcribe information.
Exceptions:
Re-authentication process only relies on basic personal identification information to which the user has easy access, such as name, address, email address and national identification number.
This is not achievable due to governing statutory requirements.
comments - we lost the "speech" criteria, but at this point I do not remember why. I do not think speach signatures are included in 1.1.1 or captions etc as it is not a percivability issue.
All the best
Lisa Seeman
LinkedIn, Twitter