h5

Persistent Customer Sessions at a glance

Site Genre: Pattern Group h

magnify imageFigureH5.1 Cookies are the most common way of implementing persistent customer sessions, which are necessary to provide personalized services. However, cookies pose several implementation and privacy problems. H5.1 (www.cookiecentral.com, November 28, 2001) D4 A1 A10 A3 Duyne_H_545-630.qxd 11/17/06 11:27 AM Page 570

Background

All Web applications that provide any degree of PERSONALIZED CONTENT (D4), such as PERSONAL E-COMMERCE (A1), COMMUNITY CONFERENCE (A3), and WEB APPS THAT WORK (A10), need a way to identify and track customers.

Close

PROBLEM

To provide personalized services, Web sites need to identify and track their customers while the customers are on the site.

buy the book to find out more

SOLUTION

magnify image FigureH5.2 Persistent customer sessions are maintained by cookies, small pieces of information passed between the Web browser and the Web server. This information can be used to create personalized content and services.

Use customer sessions to provide personalized services. Use temporary sessions for short-lived temporary data or when privacy concerns dictate, such as on self-service government Web sites. Use persistent sessions for long-lived data, or when the customer’s identity needs to be known. Avoid placing any sensitive data in session IDs. Use cookies for identification, but not for authentication.

Other Patterns to Consider

Any Web site that requires visitors to go through the SIGN-IN/NEW ACCOUNT (H2) pattern, or that provides any form of PERSONALIZED CONTENT (D4), requires persistent customer sessions. Every Web site needs a clear and well-thought-out PRIVACY POLICY (E4) that explains the FAIR INFORMATION PRACTICES (E3) and how your site uses persistent customer sessions. You can let your customers control the application of these policies using PRIVACY PREFERENCES (E8). Consider using SECURE CONNECTIONS (E6) when you use persistent customer sessions, especially if potentially sensitive data is involved. Financial information, the authority to make purchases, and personal data are examples of sensitive data.

Close

 

Pattern Resources

PATTERN COMMENTS

POST A COMMENT and/or EXAMPLE WEBSITE

You must be logged in to post a comment.