A SOC engineer is integrating a threat intelligence platform with an internal script. The vendor documentation shows that each request must include an 'Authorization' header containing a shared identifier plus a computed hash of the request body, timestamp, and a secret key that is never transmitted over the wire. Which authentication mechanism does this describe?