The same way you assign usernames to pubkeys. Each client keeps a list. Relays would need a challenge/response mechanism where they sign challenge data with the IP, so clients can verify.