Method of secure data processing on a computer system

A method of secure data processing on a computer system with a higher-level or coordinated secure operating system that is not visible for a user, wherein

• the secure operating system as a computer program application provides a virtual machine (VM) with virtual computer hardware on which a user operating system visible to and usable by the user can be executed and which has at least one virtual mass memory with a file system of the user operating system, or
• the secure operating system is encapsulated in a first virtual machine and the user operating system visible to and usable by the user and equipped with at least one virtual mass memory with a file system is executed in a second virtual machine,
• the secure operating system cannot by manipulated by the user or a computer program application, in particular malware,
• the file system of the user operating system is read in and provided to an analysis process executed on the secure operating system,
• a read access of the user operating system to a data block in the virtual mass memory (sector) is intercepted and transferred to the analysis process that assigns the data block to a file and determines all the data blocks pertaining to the file, and
• the analysis process controls a test process executed in the secure operating system (scan engine) to detect harmful files.