act of confirming the truth of an attribute of a datum or entity, often used as part of access control