Authenticated web services : a WS-security based implementation