MALSWITCH proves biometric effectiveness

September 2009 Access Control & Identity Management

The Malawi Switch Centre (MALSWITCH) was established in 1999 by the Reserve Bank of Malawi to create a mechanism of providing an easy to use, secure and guaranteed electronic payment infrastructure in Malawi as part of the country’s National Payment System Modernisation Programme. Dr Matthews Mtumbuka, head of technical services at MALSWITCH took the podium at the BiometriX 2009 conference, held in Johannesburg this year to present an overview of the system and its benefits to both buyers and sellers in Malawi. Specifically, Dr Mtumbuka focused on how biometrics plays a crucial role in securing transactions.

Dr Matthews Mtumbuka
Dr Matthews Mtumbuka

MALSWITCH relies first and foremost on a national fibre backbone that links the MALSWITCH head office in Blantyre with its regional offices around the country. Through this redundant backbone, all financial transactions are verified and processed, reducing fraud and improving service delivery. The software foundations of the system are an EFT switch and an associated e-banking solution that actually handle the secure transactions, which range from ATM transactions, to mobile commerce, e-cheque clearing and more.

The manner in which users can purchase goods is via a smartcard, which can then be used as a debit, ATM, shopping or fuel card. The card contains each user’s personal details as well as their biometric data, which is linked to the individual’s profile on the national AFIS database. Not only does the use of biometrics ensure the cardholder is who they claim to be, but it prevents unauthorised users from being able to use someone else’s card.

Biometrics at work

When a user enrols for a MALSWITCH account, their details are collected by whichever institution enrols them, along with their electronically scanned fingerprints. The four best fingerprints are used to create a biometric key, which is compared to the national AFIS database to ensure the person is who they claim to be. Once cleared, the individual is issued with an IBA (Instant Bank Account) against his/her profile, the card is issued and the individual can start using it. Each transaction made with the card is electronically verified and the fingerprint biometric ensures only authorised people spend on their own cards.

Explaining why biometrics and specifically fingerprint biometrics were chosen in this project, Dr Mtumbuka notes that MALSWITCH wanted an identification mechanism that could not be forgotten, lost or stolen – such as passwords or PINs – and that was also very reliable. Ideally, the identification mechanism chosen would have all of the following properties:

* It had to be universally present at all times.

* It naturally had to be unique to the individual.

* It must be stable over time to ensure a specific individual is always recognised as himself or herself.

* It had to be easily measurable.

Although biometric measurements have certain disadvantages, such as requiring specialised equipment and trained personnel to manage, as well as being a capital-intensive project to get off the ground, the benefits and reduced opportunities for fraud swung the vote in favour of this technology. The system is currently in operation and to date, MALSWITCH has hundreds of thousands of registered users and the number continues to grow.

More than transactions

Realising the potential of an organisation with the reach of MALSWITCH, the centre has evolved to deliver more than secure financial transactions. In fact, MALSWITCH offers a wide range of products and services through three business units, namely the EFT switch, networks and application service provider (ASP).

The EFT switch comprises a network of ATMs and point of sale (POS) devices that use the smartcard for payments and the general transfer of funds from one point to another. Companies can pay employees salaries directly into the card (as it does with 700 000 government employees), avoiding the risks of carrying cash and providing a savings account for banked and unbanked employees. Cardholders are able to load cash, pay at retail outlets, or transfer funds to other cards with ease, as well as use the card for identification or as a loyalty card.

MALSWITCH also provides value added network (VAN) services to companies, financial institutions and the government. “Our VAN service is unique in that it is a total network solution provided by single service provider,” explains Dr Mtumbuka.

The organisation’s ASP service is linked to a development centre, which can offer a host of services to government or commercial organisations. The solutions offered range from payroll services to workflow applications, through to websites and custom Web applications.

Apart from the convenience of a single point of contact for the entire MALSWITCH service, the project has reduced the fraud and potential for fraud immensely, benefitting both buyers and sellers. Citizens can transact securely, with ease, understanding that their personal data is securely stored and managed.

For more information: www.malswitch.mw





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Controlling access for people and vehicles
IDEMIA STid Security Technews Publishing Editor's Choice Access Control & Identity Management Asset Management Industrial (Industry) Mining (Industry)
When it comes to access control, the security requirements of mines and the industrial sector are similar, requiring a layered approach that combines physical barriers, digital authentication, and continuous monitoring to protect personnel, assets, and operational continuity.

Read more...
Paxton launches new phone-based security system: Solo
Paxton News & Events Access Control & Identity Management
Paxton has officially unveiled Solo, a phone-based, cloud-hosted access control system. As part of the launch, installers can claim a free Solo starter kit from Paxton, allowing them to trial the system and see how it can work for their business.

Read more...
Taking control of IAM in the AI era
Access Control & Identity Management AI & Data Analytics
AI and Shadow AI are proliferating, creating a series of new risks for organisations. To gain control over who and what has access to corporate data, organisations need unified control over their entire environment.

Read more...
Impro announces Primo update
News & Events Access Control & Identity Management Integrated Solutions
Impro Technologies recently held a launch event in which it introduced a series of new products, from new readers through to its updated Primo access management software.

Read more...
If you cannot prove identity, you cannot claim security
Access Control & Identity Management Information Security
Cybersecurity planning for 2026 is a structural change in how attacks are executed and how trust is exploited, demanding that companies stop layering tools on top of infrastructure and instead prioritise intelligence and identity.

Read more...
Paxton set to launch game-changing new system
Paxton Access Control & Identity Management News & Events
Access control is evolving fast. Installers and end users are looking for systems that are simple to install, easy to manage remotely, and flexible enough to scale. In response, Paxton is exploring how emerging technologies can reshape access control.

Read more...
NEC XON secures mobile provider’s hybrid identities
NEC XON Access Control & Identity Management Information Security Commercial (Industry)
For a leading South African telecommunications operator, identity protection has become a strategic priority as identity-centric attacks proliferate across the industry. The company faced mounting pressure to secure both human and non-human identities across complex hybrid environments.

Read more...
Cloud security in visitor management and access control
SA Technologies Access Control & Identity Management Infrastructure Residential Estate (Industry) Commercial (Industry)
Cloud has become the default platform for modern security operations, from visitor management portals and remote access control to incident logging, reporting, analytics, and integrations. But “in the cloud” does not mean “someone else is securing it for us”.

Read more...
Centurion raises the bar at HomeSec Expo
Centurion Systems News & Events Access Control & Identity Management Residential Estate (Industry) Smart Home Automation Commercial (Industry)
Centurion Systems unveiled its latest product lines at HomeSec Expo 2026, introducing SMART+, a simpler way for installers and end users to manage their Centurion installations - as well as a few new products.

Read more...
What’s in store for PAM and IAM?
Access Control & Identity Management Information Security
Leostream predicts changes in Identity and Access Management (IAM) and Privileged Access Management (PAM) in the coming year, driven by evolving cybersecurity realities, hybridisation, AI, and more.

Read more...










While every effort has been made to ensure the accuracy of the information contained herein, the publisher and its agents cannot be held responsible for any errors contained, or any loss incurred as a result. Articles published do not necessarily reflect the views of the publishers. The editor reserves the right to alter or cut copy. Articles submitted are deemed to have been cleared for publication. Advertisements and company contact details are published as provided by the advertiser. Technews Publishing (Pty) Ltd cannot be held responsible for the accuracy or veracity of supplied material.




© Technews Publishing (Pty) Ltd. | All Rights Reserved.