I think you can use JAAS for get a security access. The JAAS provides authentication with certificates, user/password and others.
But I think JAAS can't controll access via IP address.
[Message sent by forum member 'xflyer' ]
http://forums.java.net/jive/thread.jspa?messageID=371543