# Sub-GHz Frequency to Device Type Chart

## Quick Reference Guide

Visual mapping of Sub-GHz frequencies (300-928 MHz) to common IoT device types.

---

## Frequency Band Overview

```
300 MHz ═══════════════════════════════════════════════════════════════════════ 928 MHz
│                                                                                │
│ 300-348 MHz │   387-464 MHz   │           779-928 MHz                        │
│  (NA/Asia)  │  (Global 433)   │      (EU 868 / NA 915)                       │
│                                                                                │
└────────────────────────────────────────────────────────────────────────────────┘
     TPMS         Weather/RF         Smart Meters/LoRa/RFID
   Security       Remotes            Industrial IoT
   Sensors        Doorbells
```

---

## Detailed Frequency Map

### 300-348 MHz Band (North America, Asia, Japan)

```
300 ─────────────────────────────────────────────────────────────── 348 MHz
│
├─ 310-320 MHz   Biomedical telemetry (medical devices)
│
├─ 313-316 MHz   TPMS (Tire Pressure Monitoring Systems)
│                └─ Schrader, Continental, Pacific
│
├─ 315 MHz ★★★   Garage door openers, car key fobs
│                ├─ Generic remotes
│                ├─ Home automation
│                └─ Wireless doorbells
│
├─ 319.5 MHz     GE/Interlogix security sensors
│                └─ Professional alarm systems
│
└─ 345 MHz       Honeywell security sensors
                 └─ Residential alarm systems
```

**Key Characteristics**:
- ✓ Better building penetration
- ✓ Longer range than higher frequencies
- ✗ Lower data rates
- ✗ Larger antenna required

**Common Protocols**: Princeton, PT2260, EV1527

---

### 387-464 MHz Band (Global - Most Popular)

```
387 ─────────────────────────────────────────────────────────────── 464 MHz
│
├─ 390 MHz       Chamberlain garage door openers
│                └─ Security+ encrypted remotes
│
├─ 433.05-434.79 MHz ★★★★★ (PRIMARY ISM BAND - Europe/Asia/Australia)
│  │
│  ├─ 433.05 MHz    Generic remotes, sensors
│  │                └─ PT2260, EV1527, Princeton
│  │
│  ├─ 433.42 MHz    Somfy RTS (motorized blinds/shutters)
│  │                └─ Proprietary protocol
│  │
│  ├─ 433.92 MHz    Most common SubGhz frequency
│  │                ├─ Weather stations (Oregon Scientific, Acurite)
│  │                ├─ Car key fobs
│  │                ├─ Remote controls (Nice Flor-S, FAAC)
│  │                ├─ Wireless sensors
│  │                ├─ Doorbells
│  │                └─ Security sensors
│  │
│  └─ 434.79 MHz    Upper ISM limit
│
└─ 464 MHz          Citizen Band Radio (CB) / Public Mobile Radio
```

**Key Characteristics**:
- ✓ **Most popular frequency worldwide**
- ✓ Excellent range (10km+ with LoRa)
- ✓ Good building penetration
- ✓ Low power consumption
- ✗ **Very crowded** (high interference)

**Common Protocols**:
- Princeton (PT2262/PT2264/PT2260)
- EV1527 (cheap Chinese remotes)
- Oregon Scientific (weather stations)
- Acurite (weather sensors)
- LaCrosse (temperature/humidity)
- Nexus (outdoor sensors)
- Somfy RTS (blinds)
- Nice Flor-S (gates)
- FAAC (gates)
- Keeloq/HCS301 (encrypted)

**Device Categories**:
- 🌡️ Weather stations (70% of 433MHz traffic)
- 🚪 Remote controls (gates, garage doors)
- 🔐 Security sensors
- 🏠 Home automation
- 🚗 Car key fobs

---

### 779-928 MHz Band (Europe 868 / North America 915)

```
779 ─────────────────────────────────────────────────────────────── 928 MHz
│
├─ 868 MHz (Europe) ★★★★
│  │
│  ├─ 868.0-868.6 MHz    Smart meters (WMBUS)
│  │                     └─ Gas, water, electricity meters
│  │
│  ├─ 868.0-868.6 MHz    LoRa IoT devices
│  │                     └─ Long-range sensors
│  │
│  ├─ 868.30 MHz         Z-Wave home automation
│  │                     └─ Smart home devices
│  │
│  ├─ 868.40 MHz         Alarm systems
│  │
│  └─ 868.95 MHz         SCADA systems
│
└─ 915 MHz (North America, Australia) ★★★★
   │
   ├─ 902-928 MHz        ISM band (North America)
   │                     └─ Wide band usage
   │
   ├─ 902-928 MHz        RFID tags (UHF)
   │                     └─ Passive and active RFID
   │
   ├─ 915 MHz            LoRa IoT (North America)
   │                     └─ Long-range sensors
   │
   ├─ 915 MHz            Smart meters
   │                     └─ AMR (Automatic Meter Reading)
   │
   ├─ 902-928 MHz        ZigBee (900MHz variant)
   │                     └─ Home automation
   │
   └─ 915 MHz            Industrial sensors
                         └─ SCADA, telemetry
```

**868 MHz (Europe) Characteristics**:
- ✓ Higher bandwidth than 433MHz
- ✓ Less crowded than 433MHz
- ✓ Good for data-intensive apps
- ✓ Better for smart meters
- ✗ Reduced range vs 433MHz
- ✗ Less building penetration

**915 MHz (North America) Characteristics**:
- ✓ Wide bandwidth (902-928 MHz)
- ✓ Good for industrial IoT
- ✓ High data rates possible
- ✗ More interference in urban areas
- ✗ Less building penetration

**Common Protocols**:
- LoRa (chirp spread spectrum)
- WMBUS (Wireless M-Bus)
- Z-Wave
- ZigBee (900MHz)
- Proprietary SCADA protocols

**Device Categories**:
- ⚡ Smart meters (electricity, gas, water)
- 📡 LoRa sensors (agriculture, city infrastructure)
- 🏭 Industrial telemetry
- 🏠 Z-Wave home automation
- 🏷️ RFID tags (logistics, inventory)

---

## Device Type to Frequency Quick Reference

### By Device Category

#### 🚗 Automotive
- **TPMS**: 313-316 MHz (NA), 433 MHz (EU)
- **Car Key Fobs**: 315 MHz (NA), 433 MHz (EU/Asia)
- **Remote Start**: 315 MHz (NA), 433 MHz (EU)

#### 🏠 Home Automation
- **Garage Door Openers**: 315 MHz (NA), 390 MHz (Chamberlain), 433 MHz (EU)
- **Gate Openers**: 433.92 MHz (Nice, FAAC, Somfy)
- **Smart Plugs**: 433 MHz, 868 MHz (Z-Wave), 915 MHz (ZigBee)
- **Motorized Blinds**: 433.42 MHz (Somfy RTS)
- **Doorbells**: 315 MHz (NA), 433 MHz (EU)

#### 🌡️ Environmental Sensors
- **Weather Stations**: 433.92 MHz (Oregon Scientific, Acurite, LaCrosse)
- **Temperature Sensors**: 433 MHz
- **Humidity Sensors**: 433 MHz
- **Rain Gauges**: 433 MHz

#### 🔐 Security Systems
- **Door/Window Sensors**: 315 MHz (NA), 345 MHz (Honeywell), 319.5 MHz (GE)
- **Motion Detectors**: 315 MHz, 433 MHz
- **Glass Break Sensors**: 433 MHz
- **Panic Buttons**: 433 MHz
- **Alarm Panels**: 868 MHz (EU), 915 MHz (NA)

#### ⚡ Utility/Smart Meters
- **Electricity Meters**: 868 MHz (EU), 915 MHz (NA)
- **Gas Meters**: 868 MHz (EU), 915 MHz (NA)
- **Water Meters**: 868 MHz (EU), 915 MHz (NA)
- **AMR Systems**: 915 MHz

#### 📡 Industrial IoT
- **SCADA Systems**: 868 MHz (EU), 915 MHz (NA)
- **Telemetry**: 915 MHz
- **LoRa Sensors**: 868 MHz (EU), 915 MHz (NA)
- **Asset Tracking**: 915 MHz (RFID)
- **Industrial Remotes**: 433 MHz

---

## Regional Frequency Regulations

### North America (FCC Part 15)
- **Primary**: 315 MHz, 915 MHz
- **Power Limits**:
  - 315 MHz: 50 mV/m at 3 meters
  - 915 MHz: 50 mV/m at 3 meters
- **Duty Cycle**: Unlimited

### Europe (ETSI EN 300 220)
- **Primary**: 433 MHz, 868 MHz
- **Power Limits**:
  - 433 MHz: 10 mW ERP
  - 868 MHz: 25 mW ERP (varies by sub-band)
- **Duty Cycle**:
  - 433 MHz: 10% or 1%
  - 868 MHz: 1% or 10% (depends on sub-band)

### Asia/Australia
- **Primary**: 315 MHz, 433 MHz, 915 MHz
- **Varies by country**: Check local regulations

---

## Modulation by Frequency

### 315 MHz
- **Primary**: OOK (On-Off Keying)
- **Secondary**: ASK (Amplitude Shift Keying)
- **Encoding**: PWM, PPM
- **Reason**: Simple, cheap, low power

### 433 MHz
- **Primary**: OOK, ASK
- **Secondary**: FSK (modern devices)
- **Encoding**: PWM (most common), Manchester (weather stations), PPM
- **Reason**: Best balance of simplicity and reliability

### 868/915 MHz
- **Primary**: FSK (Frequency Shift Keying)
- **Secondary**: LoRa CSS (Chirp Spread Spectrum)
- **Encoding**: Manchester, GFSK, LoRa modulation
- **Reason**: Higher data rates, better noise immunity required

---

## Protocol Prevalence Chart

### Most Common Protocols by Frequency

**315 MHz (North America)**:
1. Princeton/PT2260 (60%)
2. EV1527 (20%)
3. Keeloq (10%)
4. Proprietary (10%)

**433 MHz (Global)**:
1. EV1527 (30%) - Cheap Chinese devices
2. Oregon Scientific (15%) - Weather stations
3. Princeton/PT2260 (15%) - Generic remotes
4. Acurite (10%) - Weather sensors
5. LaCrosse (8%) - Temperature sensors
6. Somfy RTS (5%) - Motorized blinds
7. Nice Flor-S (5%) - Gate openers
8. Keeloq/HCS301 (5%) - Encrypted remotes
9. Other (7%)

**868 MHz (Europe)**:
1. WMBUS (30%) - Smart meters
2. LoRa (25%) - IoT sensors
3. Z-Wave (20%) - Home automation
4. Proprietary SCADA (15%)
5. Other (10%)

**915 MHz (North America)**:
1. LoRa (30%) - IoT sensors
2. RFID (25%) - Asset tracking
3. ZigBee (15%) - Industrial
4. WMBUS (15%) - Smart meters
5. Proprietary (15%)

---

## Signal Strength and Range

### Typical Ranges by Frequency

```
Frequency  │  Indoor Range  │  Outdoor Range (LOS)  │  Penetration
───────────┼────────────────┼───────────────────────┼──────────────
315 MHz    │  50-100m       │  300-500m             │  Excellent
433 MHz    │  30-100m       │  200-500m             │  Very Good
868 MHz    │  20-80m        │  150-400m             │  Good
915 MHz    │  20-80m        │  150-400m             │  Good
LoRa 868   │  1-5km         │  10-20km              │  Excellent
LoRa 915   │  1-5km         │  10-20km              │  Excellent
```

**Factors Affecting Range**:
- Lower frequency = better penetration
- Higher power = more range (within legal limits)
- Modulation type (FSK better than OOK)
- Antenna quality and placement
- Environmental obstacles (walls, metal, trees)
- Interference from other devices

---

## Usage Recommendations for GigLez

### Device Attribution Strategy

**High Confidence (0.9-1.0)**:
- 433.42 MHz + OOK → **Somfy RTS blinds**
- 433.92 MHz + Manchester + Oregon protocol → **Oregon Scientific weather station**
- 315 MHz + Keeloq → **Car key fob** (North America)
- 868 MHz + WMBUS protocol → **Smart meter** (Europe)

**Medium Confidence (0.7-0.9)**:
- 433 MHz + PWM + 24-bit → **EV1527 remote/sensor**
- 315 MHz + PWM → **Generic garage door opener**
- 433 MHz + FSK → **Modern car key fob**

**Low Confidence (0.5-0.7)**:
- 433 MHz + unknown protocol → **Consumer RF device** (remote, sensor, doorbell)
- 915 MHz + FSK → **Industrial sensor or meter** (North America)

### Frequency-Based Categorization

```python
def categorize_by_frequency(frequency: int, region: str = 'NA') -> List[str]:
    """
    Return likely device categories based on frequency
    """
    categories = []

    if 313_000_000 <= frequency <= 316_000_000:
        categories.append('TPMS')
        if region == 'NA':
            categories.extend(['Garage Door', 'Car Key Fob', 'Security Sensor'])

    elif 319_000_000 <= frequency <= 320_000_000:
        categories.append('GE/Interlogix Security Sensor')

    elif 344_000_000 <= frequency <= 346_000_000:
        categories.append('Honeywell Security Sensor')

    elif 389_000_000 <= frequency <= 391_000_000:
        categories.append('Chamberlain Garage Door')

    elif 433_050_000 <= frequency <= 434_790_000:
        categories.extend([
            'Weather Station',
            'Remote Control',
            'Wireless Sensor',
            'Car Key Fob',
            'Doorbell',
            'Security Sensor'
        ])

        # Narrow down by exact frequency
        if 433_410_000 <= frequency <= 433_430_000:
            categories.insert(0, 'Somfy RTS Blind')
        elif 433_910_000 <= frequency <= 433_930_000:
            categories.insert(0, 'Generic 433MHz Device (most common)')

    elif 868_000_000 <= frequency <= 870_000_000:
        if region == 'EU':
            categories.extend([
                'Smart Meter',
                'LoRa Sensor',
                'Z-Wave Device',
                'Alarm System'
            ])

    elif 902_000_000 <= frequency <= 928_000_000:
        if region == 'NA':
            categories.extend([
                'RFID Tag',
                'LoRa Sensor',
                'Smart Meter',
                'ZigBee Device',
                'Industrial Sensor'
            ])

    return categories
```

---

## Summary

### Key Takeaways

1. **433 MHz is king**: Most SubGhz devices use 433MHz (Europe/Asia/Australia)
2. **315 MHz for North America**: Security and automotive in NA
3. **868/915 MHz for advanced**: Smart meters, LoRa, industrial
4. **Frequency + Modulation + Protocol** = High-confidence ID
5. **Geographic region matters**: 315/915 (NA) vs 433/868 (EU)

### Attribution Confidence Factors

**Increases Confidence**:
- ✓ Exact frequency match (±5kHz)
- ✓ Known protocol decoded
- ✓ Checksum validation passed
- ✓ Modulation type matches
- ✓ Bit length matches
- ✓ Timing characteristics match

**Decreases Confidence**:
- ✗ RAW signal (no protocol decode)
- ✗ Frequency mismatch
- ✗ Unknown modulation
- ✗ No checksum validation
- ✗ Timing variations

---

## Resources

- **Frequency Database**: https://www.sigidwiki.com/
- **FCC OET**: https://www.fcc.gov/oet/ea/fccid
- **RTL_433 Protocols**: https://github.com/merbanan/rtl_433/tree/master/src/devices
- **Flipper Zero DB**: https://github.com/Zero-Sploit/FlipperZero-Subghz-DB
- **ISM Bands**: https://en.wikipedia.org/wiki/ISM_radio_band
