如何将会话数据加密为令牌以授权后续Web服务调用？

I have a web service that needs to be protected from unauthorized users. I need to expose a web service operation to Authorize a user, based on username and password. The response to the user validation request should contain a security token. That security token contains some embedded user properties that the client applicatino can use, but when encrypted, will also be used to authenticate subsequent web service operations. The unencrypted token looks something like this:I have a web service that needs to be protected