Self-signed certificates for computer application signatures

A computer-implemented method for controlling access to computer resources using computer applications signed using one or more self-signed certificates, the method comprising:

• instantiating a first application in a first process on a computing device;
• receiving a request to instantiate a second application in the first process;
• determining whether the first application and the second application were signed by the same self-signed electronic certificate that was created without assistance from a certifying authority, the electronic certificate associated with a validity period for which the electronic certificate is valid for signing applications;
• allowing access to data controlled by the first application and running the second application in the process if the first application and the second application are determined to have been signed by the same self-signed electronic certificate;
• generating a compiled version of the second application;
• and
• submitting the signed second software application to the on-line application store.

A computing system having structures for controlling access to computer resources using computer applications signed using self-signed certificates, the system comprising:

• one or more computer applications each signed with a self-signed security certificate and stored on a computing device, the security certificate associated with a validity period for which the security certificate is valid for signing the one or more computer applications;
• and
• an operating system operable on the computing device to provide resources for executing the one or more computer applications,
• wherein the operating system includes one or more components programmed to:
• control access by a first application to resources controlled by a second application based on the presence of a match between electronic security certificates with which the first and the second application are signed;
• determine whether the first application and the second application were signed by the same self-signed electronic certificate that was created without assistance from a certifying authority, and to allow the second application to run in a process assigned to the first application only if the first application and the second application are determined to have been signed by the same self-signed electronic certificate;
• and
• permit the second application to run in the process to upgrade and remove the first application while maintaining data that is accessible only to applications that have been signed with the certificate.

A computing system having structures for controlling access to computer resources using computer applications signed using self-signed certificates, the system comprising:

• one or more computer applications each signed with a self-signed security certificate and stored on a computing device, the security certificate associated with a validity period for which the security certificate is valid for signing the one or more computer applications;
• one or more data stores repositories storing data accessible by the one or more computer applications;
• and
• an operating system that includes one or more components for:
• controlling access to computer resources by determining whether a first application of the one or more computer applications is signed with a self-signed electronic security certificate that matches a self-signed security certificate of a second application;
• determining whether the first application and the second application were signed by the same self-signed electronic certificate that was created without assistance from a certifying authority, and to allow the second application to run in a process assigned to the first application only if the first application and the second application are determined to have been signed by the same self-signed electronic certificate;
• and
• permitting the second application to run in the process to upgrade and remove the first application while maintaining data that is accessible only to applications that have been signed with the certificate.