open-source security framework

Apache Shiro is a powerful and flexible open-source security framework that cleanly handles authentication, authorization, enterprise session management and cryptography.

see below link
http://cwiki.apache.org/SHIRO/index.html