I notice that when multiple clients are invoking the same web service concurrently,Correct. So, don't use instance variables. Put per-session stuff into the session.
all of them are using the same web service implementation instance.
Any instance variable defined in it is shared among all clients and could be changed
by anyone at anytime.