...JavaCard¹

http://java.sun.com/products/javacard

... Specification²

http://www.globalplatform.org

... Framework³

http://www.opencard.org

... Workgroup⁴

http://www.pcscworkgroup.com/

... parameters⁵

Strictly speaking, because a symmetric session key is used to protect the data, also the callee can construct valid parameters. Therefore non-repudiation cannot be guaranteed.