You may follow the java security framework like

https://docs.oracle.com/javase/7/docs/api/java/security/package-summary.html

or

https://dzone.com/articles/a-different-kind-of-java-security-framework

You could also have a look at Shiro: https://shiro.apache.org

Or maybe you can specify your use case a bit more detailed if existing solutions don't fit your need.

Wannacry and ransomware attacks have made security first priority.