Abstract
Identity and Access Management (IAM) is essential and a core of any information system in enterprise networks. IAM systems manage users on premises, focus on the needs within enterprises, and utilize static intelligence for authentication and access control. Today's IAM requirements are much more complex due to the Internet of Things (IoT). Boundaries between home and work, on-premises and cloud, personal devices and corporate owned devices are fading away. These changes have driven the shift of IAM to Identity Relationship Management (IRM). IRM aims to meet the demands not only within enterprises, but also from the Internet. It manages not only users, but also devices. It utilizes not only static intelligence but also dynamic intelligence for authentication and access control. This paper introduces and discusses the needs of IRM for the IoT. It addresses four fundamental issues related to relationships in the IRM, i.e., what relationships need to be supported in the IRM, how relationships can be used for authentication, how relationships can be utilized for access control, and what infrastructure is required to support the IRM. The paper also differentiates IAM and IRM and points out future research directions in the IRM.