Method and device for authenticating user identity based on transaction data

A method and device for authenticating a user identity based on transaction data. The method comprises: obtaining historical transaction data associated with an account according to account information provided by a user; generating one or more test questions according to the historical transaction data; providing the one or more test questions for the user; receiving an answer to the one or more test questions from the user; and judging whether the user passes authentication according to the answer.