check Nonce-verification rule