The MysticAIR login system was introduced to answer the request by some end-users for a mechanism for their readers to login to Mystic using a generic user account, and perform basic functions such as Searching and Issuing of items.

As Mystic is an online application however, rather than a desktop system installed on a single, protected machine, this naturally posed some clear security problems - not least of which is that Mystic is designed for use from anywhere in the world. Opening up generic logins to school readers would also open those same logins externally to the library as well.

MysticAIR was designed therefore, to allow:

• Fast access as a generic user on authorised, trusted machines,
• Fast access for readers to login from a remote location (e.g. their home), but only to perform a limited range of functions without the need to remember usernames, passwords and library license codes.

The heart of MysticAIR revolves around the use of a cookie placed onto a trusted computer, containing a key encrypted with strong, military grade encryption. This key in isolation, even if it could be decrypted, is useless as it is just a reference to more important information stored in the central MysticAIR servers, and therefore poses no security risk.

If the key is lost or removed, Mystic simply prevents access completely. To regain access, a new 'invitation' needs to be issued by the librarian. Conversely, the librarian can also change the available permissions on a registration, or revoke it completely, making even a registered computer useless.

To use MysticAIR, it first needs to be turned on. While the [Login Using MysticAIR] button is always available on the main screen, this is because at this point Mystic has no idea which library or user account is going to be used. Everybody, all over the world, is presented with this same screen. Selecting this login without a valid Registration cookie simply provides a means for the end-user to register their 1st invitation.

In order to turn on MysticAIR, login as an authorised staff member and enter the [Readers] manager window. Switch to the [Tools] menu, and click [Turn ON] in the MysticAIR group.

That's it. At this point of course, there are no invitations have been issued so no-one will be able to login using the system.

In order to change your MysticAIR use from the standard settings, go into the [Readers] manager window, switch tp the [Tools] menu, and click [Manage] in the MysticAIR group.

This presents a slide-down window containing four basic yes/no options:

• ACTIVE - Is the system turned on. You can turn it on/off here, in the same way as using the toolbar button on the [Readers] manager window.
• SUSPEND - Similar to ACTIVE, but typically used for temporarily suspending MysticAIR logins. Using SUSPEND rather than ACTIVE presents readers attempting to login with a slightly different message, assuring them that the stoppage is temporary.
• CIRCULATIONS Default - This is the default setting for new invitations, stating whether they should be permitted to use the Issue & Return features. We recommend that for Reader Invitations, this remain OFF as users of the system from home will typically not be in a position to borrow / return items from a remote location - best to keep that within the school / library.
• RESERVE Default - This is the default setting for new invitations, stating whether they should be allowed to reserve items that they find in the catalogue. At initial time of release, reservations are not permitted by MysticAIR.

Pergamon Wiki Home