ARTICLE

Data Provenance for Digital Twins

Data provenance links twin state to source identity, collection, time, quality, calibration, transformations, and custody.

Published
Last reviewed
Evidence
SUPPORTED
Author
Open Digital Twin Security Lab
DIRECT ANSWER

Data provenance is the evidence needed to trace digital-twin state back through its source, collection conditions, time context, quality, calibration, transformations, and custody. It helps systems and investigators decide whether apparently valid data is suitable for a particular model, decision, or physical action.

Provenance is more than a source name

Useful records include device identity, location, calibration, time source, units, collection method, validation, transformation, aggregation, correction, and the policies applied.

Preserve decision lineage

For consequential outputs, link the exact data, model, code, configuration, approvals, and commands. Make gaps visible.

Design for disagreement

Two authentic sources may conflict. Record reconciliation logic and retain the original evidence instead of overwriting ambiguity.

Related resources

PRIMARY SOURCES

References

  1. NIST IR 8356: Security and Trust Considerations for Digital Twin TechnologyNIST · 2025 · Government research publication

    Primary NIST treatment of digital-twin characteristics, cybersecurity, and trust considerations.

  2. NIST SP 800-53 Rev. 5: Security and Privacy Controls for Information Systems and OrganizationsNIST · 2020 · Control catalog

    A flexible catalog of security and privacy controls; not a digital-twin-specific baseline.