Security and web service

Hi,

is there any way to implement a service available only with username and password?

what about WS-SecurityPolicy? Can I use it?

I would like to achieve the same stuff. Does anybody know how to create a web service with WS-SecurityPolicy?