Obtaining jointly trained model based on privacy protection

Abstract

One or more embodiments of the present specification relate to a method and system for obtaining a jointly trained model based on privacy protection. An example method includes jointly training a first model, by a first device and with a second device, the first device and the second device each holding respective training data that includes first training data with a sample label, and second training data without the sample label. Jointly training the first model includes privately obtaining the first training data, and performing joint model training using the first training data. The second training data is input to the trained first model to obtain a predicted label for the second training data. Jointly training a second model includes privately obtaining labeled training data, and performing joint model training using the first training data, the second training data, and the labeled training data.