[ Thanks to Irish for this link. ]
IBM and Microsoft just released specifications describing Web Services Security (WS-Security), or enhancements to SOAP messaging to provide quality of protection through message confidentiality and authentication.
IBM and Microsoft just released specifications describing Web Services Security (WS-Security), or enhancements to SOAP messaging to provide quality of protection through message confidentiality and authentication. There is a developerWorks overview document and a whitepaper describing this Web service security model.