A method for encrypting a neural network model, comprising: acquiring an encrypted model file by encrypting at least a part of model information in an original model file describing a target neural network model; generating (S 102), according to the encrypted model file, a model program code describing the target neural network model; and sending, to a User Equipment, UE, based on a request sent by the UE, an installation package for installing an application, APP, the installation package comprising the model program code, characterized in that the acquiring an encrypted model file by encrypting at least a part of model information in an original model file describing a target neural network model comprises: acquiring the encrypted model file by performing a mapping operation on the at least a part of the model information according to a preset hash function, wherein the model information comprises node information on each node in the target neural network model and a global parameter of the target neural network model, wherein the node information comprises a node identifier of the each node and a node parameter of the each node, wherein the node parameter comprises at least one of a weight parameter of the each node, an input parameter of the each node, an output parameter of the each node, or an operational parameter of the each node. acquiring an encrypted model file by encrypting at least a part of model information in an original model file describing a target neural network model; generating (S 102), according to the encrypted model file, a model program code describing the target neural network model; and sending, to a User Equipment, UE, based on a request sent by the UE, an installation package for installing an application, APP, the installation package comprising the model program code, characterized in that the acquiring an encrypted model file by encrypting at least a part of model information in an original model file describing a target neural network model comprises: acquiring the encrypted model file by performing a mapping operation on the at least a part of the model information according to a preset hash function, wherein the model information comprises node information on each node in the target neural network model and a global parameter of the target neural network model, wherein the node information comprises a node identifier of the each node and a node parameter of the each node, wherein the node parameter comprises at least one of a weight parameter of the each node, an input parameter of the each node, an output parameter of the each node, or an operational parameter of the each node. acquiring the encrypted model file by performing a mapping operation on the at least a part of the model information according to a preset hash function, wherein the model information comprises node information on each node in the target neural network model and a global parameter of the target neural network model, wherein the node information comprises a node identifier of the each node and a node parameter of the each node, wherein the node parameter comprises at least one of a weight parameter of the each node, an input parameter of the each node, an output parameter of the each node, or an operational parameter of the each node.