Based on asymmetric cryptography, Passkeys Systems are a secure authentication method that can serve as an alternative to traditional authentication methods, such as usernames and passwords. In this paper, we propose a secure approach to enhance private key synchronization mechanisms in passkeys systems. Our secure service is based on Elliptic Curve Diffie-Hellman protocol and Zero-Knowledge Proofs in a peer-to-peer environment. Following a critical analysis of existing works, which highlights recurrent vulnerabilities related to authentication and confidentiality, we introduce a robust architecture using mutual identity verification, secure session key generation and encrypted passkey transfer. The security of our proposed protocol is assessed through a dual approach: an informal analysis based on potential attack modeling, and a formal validation using ProVerif and Scyther tools. The results demonstrate enhanced resistance to replay attacks, man-in-the-middle attacks, message modification, and identity impersonation, while ensuring optimized performance in terms of computational and communication costs.
Assane Ilboudo, Didier Bassolé, Désiré Guel· EPJ Web of Conferences· 0 citations
Program Increment (PI) Planning is a critical synchronization event in scaled Agile methodologies, yet remains largely informal, with limited analytical rigor or strategic alignment. This paper introduces a formal metamodel and a model-driven framework to support structured PI Planning in large-scale software development. Our metamodel captures essential planning artifacts, including features, teams, iterations, risks, and dependencies, and is enriched with OCL constraints for validation and traceability. We extend the model to align planning with business value streams and introduce stakeholder-specific viewpoints for tailored analysis. Compared to tools like Jira or Mural, our approach provides formal semantics, automated reasoning, and extensibility. This work lays the foundation for a Domain-Specific Language (DSL) for PI Planning, bridging the gap between Agile practice and formal modeling.
Le Program Increment (PI) Planning est un événement de synchronisation essentiel dans les méthodologies d'agilité à l’échelle, mais il reste largement informel, avec une rigueur analytique et un alignement stratégique limités. Cet article présente un métamodèle formel et un cadre fondé sur l’ingénierie dirigée par les modèles (model-driven engineering) pour soutenir un PI Planning structuré dans le développement logiciel à grande échelle.Notre métamodèle capture les artefacts essentiels de planification, tels que les fonctionnalités (features), les équipes, les itérations, les risques et les dépendances, et il est enrichi de contraintes OCL pour la validation et la traçabilité. Nous étendons ce modèle afin d’aligner la planification sur les value streams métier et introduisons des vues spécifiques aux parties prenantes pour une analyse ciblée. Comparée à des outils tels que Jira ou Mural, notre approche fournit une sémantique formelle, un raisonnement automatisé et une extensibilité accrue.Ce travail pose les bases d’un langage spécifique (Domain-Specific Language, DSL) dédié au PI Planning, comblant ainsi le fossé entre la pratique Agile et la modélisation formelle.
F. Somda, D. Guel, Kisito K. Kabore· Revue Africaine de Recherche...· 0 citations
We use cookies to run the site and, with your consent, for analytics and to show ads.
See our Cookie Policy.
