1- you could use HTTPS (SSL) for securing channel.
2- you could use role-based and security-domain for limit accessibility.
3- you could use authentication and authorization library like JAAS
4- you could use message-level security  by
Kerberos token
Username token
LTPA token
X.509 token