Example model invoking methods and apparatus are described. In one example method, a first device verifies model use permission of an artificial intelligence (AI) application based on a model identifier of a to-be-invoked target AI model and a permission verification parameter of the AI application to ensure that the AI application is a valid application that has use permission. When the verification on the model use permission of the AI application succeeds, an encrypted model file of the target AI model is decrypted in a trusted execution environment (TEE) to obtain a decrypted model file. The decrypted model file is directly loaded to a memory to run the target AI model. In the entire process, the decrypted model file of the target AI model is stored in the memory.