The following are the ways to prevent your Web service from unauthorized access:

Using encryption and message-based security.

Using authentication and access controls for the Web service.