Don't reinvent the wheel. Find a secure framework that already does a good part of what your project is aiming to do.