title: Message Level Security in Rest Web services
body: <p>I want to implement two level Security in my REST web services.</p>
  
  <ol>
  <li><p>Transport layer
  For point-to-point security (transport layer) i have decided to use HTTPS.</p></li>
  <li><p>Message layer (end to end)
  I need the json data(very sensitive) to be in encrypted form which can only be decrypted by intended user.</p></li>
  </ol>
  
  <p>I need some suggestions how i can implement this? IS there any web standards like WS-Security in SOAP which we can use. I came across JSON Web Encryption (JWE), but not sure would it suffice my objective.</p>