Towards secure SOAP message exchange in a SOA