The simplest way is to use functionality integrated in application server. For example :Securing JAX-WS Web services using message-level security with WebSphere App Server
How to configure signing on WAS you can find here.
And here is WebLogic documentation about Configuring Message-Level Security.