For additional information about message security, see the following documentation:
Chapter 24, Introduction to Security in the Java EE Platform, in The Java EE 6 Tutorial
Chapter 5, Securing Applications, in Oracle GlassFish Server 3.0.1 Application Development Guide