I. Introduction
In recent years, various Deep Neural Network (DNN)-driven applications have been widely applied in Internet of Things (IoT), such as activity recognition and real-time monitoring. Massive data is generated by end-devices in IoT and utilized to train DNN models [1]. Traditional solutions transmit privately-owned data of end-devices to the central server for analyzing and training. This central training manner inevitably poses threats to data privacy and high-communication overhead. Compared with the cloud server, the edge server is geographically close to end-devices and provides relatively reliable and short-distance transmission [2]. Although utilizing the edge server to collect data and train models can significantly reduce communication cost, the privacy concern remains unsolved.