Figure 1 - AIP structure in OAIS [1] The structure preserved in the archival storage is called the Archival Information Package (AIP), depicted in figure 1. Figure 2 - Elements of the model We call one of these procedures an Authenticity Protocol (AP). An AP is a set of interrelated steps; each called Authenticity Step (AS). An AP is applied to an Object Type, i.e., to a class of objects with uniform features for the application of an AP. Any AP may be recursively used to design other APs, as expressed by the general Workflow relation. See figure 2. Figure 4 - Authenticity Protocol Execution APs are executed by an actor on objects that belong to a specific typology. The execution of an AP is modelled as an Authenticity Protocol Execution (APE). See figure 4. Authenticity should be monitored continuously so that any time a resource is somehow changed or a relationship is modified, an Authenticity Protocol cai Figure 7 - Structure of provenance data