provenance authentication