Body area network (BAN) is a key enabling technology in E-healthcare. An important security issue is to establish initial trust relationship among the BAN devices before they are actually deployed, and generate necessary shared secret keys to protect the subsequent wireless communications. Due to the ad hoc nature of the BAN and the extreme resource constraints of sensor devices, providing secure, efficient and userfriendly trust initialization is a challenging task. Traditional solutions for wireless sensor networks mostly depend on key pre-distribution, which is unsuitable for BAN in many ways. In this paper, we propose group device pairing (GDP), a user-aided multi-party authenticated key agreement protocol. Through GDP, a group of sensor devices that have no pre-shared secrets, establish initial trust by by generating various shared secret keys out of an unauthenticated channel. Devices authenticate themselves to each other under the aid of a human user who performs visual verifications. The GDP supports fast batch deployment, addition and revocation of sensor devices, does not rely on any additional hardware device, and is mostly based on symmetric key cryptography. We formally prove the security of the proposed protocols, and we implement GDP on a sensor network testbed and report performance evaluation results.