Protocol to generate Client Certificates at the start of a SSL session automatically?
I suspect that you may wish to read the current Internet draft on TLS Origin-Bound Certificates and note the organisation of the authors at the bottom.