Abstract: Aspects of the present disclosure provide an apparatus, which can include a first secured processor and secured applications embedded in the first secured processor. Each of the secured applications can be associated with an artificial intelligence (AI) model. The apparatus can further include first secured memories each configured to store an AI executable binary associated with a corresponding one of the AI models, a second secured processor configured to execute the AI executable binaries stored in the first secured memories, a sub-system, and an AI session manager configured to receive from the sub-system an AI session that identifies one of the AI models, and prepare and store an AI executable binary associated with the AI model to one of the first secured memories that corresponds to the AI executable binary. The sub-system can trigger the second secured processor to execute the AI executable binary stored in the first secured memory.