Device naming in an internet of things

One or more tangible, non-transitory computer readable storage mediums having stored thereon executable instructions for providing a name management engine, wherein the name management engine is configured to:

• receive a self-assigned name registration request for a name N1 from an endpoint device via a network interface;
• compare N1 to a database of registered names;
• determine that the name has not been registered;
• and
• sign a certificate for N1.

A computing apparatus, comprising:

• a network interface;
• and
• a key management engine operable to:
• determine that a first device D1 in a first realm R1 with the computing apparatus needs to establish a connection with a second device D2 in a second realm R2;
• establish a secure channel with a secure management service of the second realm R2;
• and
• issue a key management ticket for D1 to securely communicate with D2.