This is an old revision of the document!
The MysticAIR login system was introduced to answer the request by some end-users for a mechanism for their readers to login to Mystic using a generic user account, and perform basic functions such as Searching and Issuing of items.
As Mystic is an online application however, rather than a desktop system installed on a single, protected machine, this naturally posed some clear security problems - not least of which is that Mystic is designed for use from anywhere in the world. Opening up generic logins to school readers would also open those same logins externally to the library as well.
MysticAIR was designed therefore, to allow:
The heart of MysticAIR revolves around the use of a cookie placed onto a trusted computer, containing a key encrypted with strong, military grade encryption. This key in isolation, even if it could be decrypted, is useless as it is just a reference to more important information stored in the central MysticAIR servers, and therefore poses no security risk.
If the key is lost or removed, Mystic simply prevents access completely. To regain access, a new 'invitation' needs to be issued by the librarian. Conversely, the librarian can also change the available permissions on a registration, or revoke it completely, making even a registered computer useless.
To use MysticAIR, it first needs to be turned on. While the [Login Using MysticAIR] button is always available on the main screen, this is because at this point Mystic has no idea which library or user account is going to be used. Everybody, all over the world, is presented with this same screen. Selecting this login without a valid Registration cookie simply provides a means for the end-user to register their 1st invitation.
In order to turn on MysticAIR, login as an authorised staff member and enter the [Readers] manager window. Switch to the [Tools] menu, and click [Turn ON] in the MysticAIR group.
That's it. At this point of course, there are no invitations have been issued so no-one will be able to login using the system.
In order to change your MysticAIR use from the standard settings, go into the [Readers] manager window, switch tp the [Tools] menu, and click [Manage] in the MysticAIR group.
This presents a slide-down window containing four basic yes/no options:
Two further lists are displayed in the MysticAIR manager, but both work in the same way.
Workstation invitations are ideally issued for computers within the library, or elsewhere in the school / organisation. Essentially, issue Workstation Invitations only to computers that you trust, and where the functions presented are appropriate to the location - e.g. Self-issuing a book in the library, where the reader actually has possession of the book.
Once registered, Workstations level invitations login as a purely anonymous user and present all authorised functions to any user who clicks the [Login Using MysticAIR] button. If at any time Mystic needs to know who the user is (such as for issuing said book), Mystic will present the opportunity to enter their Reader ID.
Reader invitations are usually issued for readers to be able to access Mystic from home, or their own family desktop computer, atop or tablet. These types of invitations are directly linked to the reader, and several readers can register their invitation on the same computer (e.g. multiple children in the same school, from the same family).
Once registered by clicking the [Login Using MysticAIR] button, and entering the invitation code(s), that reader will be able to obtain access, only from that computer, by clicking the [Login Using MysticAIR] button. Because the invitation is attached to that reader, all functions within Mystic have no need to request the reader ID from this point on.
If multiple readers are registered, the MysticAIR menu system lists each registered reader. Selecting a different reader in the menu makes that reader 'active' for all of the functions.