This is an open communication protocol for applying security to web services. It specifies how to apply integrity, confidentiality and single message authentication when using SOAP messages. It also describes how to encode binary security tokens and attach them to SOAP messages.