Enabled by RFID technology, the EPCglobal network provides a platform for information sharing among supply chain partners. It is mainly composed of EPC information service (EPCIS), EPC discovery service (EPCDS), EPC object naming service (EPCONS) and other sub-systems, where EPCIS, EPCDS and EPCONS are collectively called EPCglobal network services. As the information collected and shared by supply chain partners is usually sensitive and valuable, scurity mechanisms should be provided in the EPCglobal network. However, to the best of our knowledge, there is a lack of secure prototypes for EPCglobal network services so far. In this paper, we aim at filling this gap. We design and implement a secure prototype for EPCglobal network services with a focus on the authorization mechanism.