The licensing API key part is fairly straightforward. A customer holds X amount of the token in their crypto wallet, and then the wallet address is used as an API key. Different service levels, etc, can be granted based on the amount of token held in the wallet. And API access, customer datasets, etc, can be associated with the wallet-as-an-API-key.
By provenance, I just mean that somebody who’s leveraging a dataset can see the exact history of where the data came from, when it was manipulated, etc. I believe the way it works is that each time data in a dataset is manipulated, a corresponding hash of the dataset is generated and stored on-chain. So if a you had a dataset representing the relationship between some proteins, and a study was published that provided additional data regarding one of those proteins and potential relationships, then the dataset might be updated to reflect the new information, and a hash of the dataset would be created to represent the updated dataset at that point in time. Like a git commit hash. Then they do some proprietary stuff that associates the dataset with the customer wallet address noted above, and that is stored on the blockchain in a transaction using their token.
Does that make sense?