WS-Security: Web services the secure way
Web Services themselves are not offering authentication and security services. The WS-Security standards can solve this issue.
http://www.codeproject.com/soap/WS-Security.asp