Just came across Vibro's weblog which includes a post on an informal graphic notation for illustrating the concepts involved in WS-Security and a small part of WS-Trust (communicating with an Security Token Service). 

I might just pick up on his notation which should be useful, as he points out, for communicating the complexities of message security.  So thanks to Vibro.