# Sub-GHz Frequency to Device Type Chart ## Quick Reference Guide Visual mapping of Sub-GHz frequencies (300-928 MHz) to common IoT device types. --- ## Frequency Band Overview ``` 300 MHz ═══════════════════════════════════════════════════════════════════════ 928 MHz │ │ │ 300-348 MHz │ 387-464 MHz │ 779-928 MHz │ │ (NA/Asia) │ (Global 433) │ (EU 868 / NA 915) │ │ │ └────────────────────────────────────────────────────────────────────────────────┘ TPMS Weather/RF Smart Meters/LoRa/RFID Security Remotes Industrial IoT Sensors Doorbells ``` --- ## Detailed Frequency Map ### 300-348 MHz Band (North America, Asia, Japan) ``` 300 ─────────────────────────────────────────────────────────────── 348 MHz │ ├─ 310-320 MHz Biomedical telemetry (medical devices) │ ├─ 313-316 MHz TPMS (Tire Pressure Monitoring Systems) │ └─ Schrader, Continental, Pacific │ ├─ 315 MHz ★★★ Garage door openers, car key fobs │ ├─ Generic remotes │ ├─ Home automation │ └─ Wireless doorbells │ ├─ 319.5 MHz GE/Interlogix security sensors │ └─ Professional alarm systems │ └─ 345 MHz Honeywell security sensors └─ Residential alarm systems ``` **Key Characteristics**: - ✓ Better building penetration - ✓ Longer range than higher frequencies - ✗ Lower data rates - ✗ Larger antenna required **Common Protocols**: Princeton, PT2260, EV1527 --- ### 387-464 MHz Band (Global - Most Popular) ``` 387 ─────────────────────────────────────────────────────────────── 464 MHz │ ├─ 390 MHz Chamberlain garage door openers │ └─ Security+ encrypted remotes │ ├─ 433.05-434.79 MHz ★★★★★ (PRIMARY ISM BAND - Europe/Asia/Australia) │ │ │ ├─ 433.05 MHz Generic remotes, sensors │ │ └─ PT2260, EV1527, Princeton │ │ │ ├─ 433.42 MHz Somfy RTS (motorized blinds/shutters) │ │ └─ Proprietary protocol │ │ │ ├─ 433.92 MHz Most common SubGhz frequency │ │ ├─ Weather stations (Oregon Scientific, Acurite) │ │ ├─ Car key fobs │ │ ├─ Remote controls (Nice Flor-S, FAAC) │ │ ├─ Wireless sensors │ │ ├─ Doorbells │ │ └─ Security sensors │ │ │ └─ 434.79 MHz Upper ISM limit │ └─ 464 MHz Citizen Band Radio (CB) / Public Mobile Radio ``` **Key Characteristics**: - ✓ **Most popular frequency worldwide** - ✓ Excellent range (10km+ with LoRa) - ✓ Good building penetration - ✓ Low power consumption - ✗ **Very crowded** (high interference) **Common Protocols**: - Princeton (PT2262/PT2264/PT2260) - EV1527 (cheap Chinese remotes) - Oregon Scientific (weather stations) - Acurite (weather sensors) - LaCrosse (temperature/humidity) - Nexus (outdoor sensors) - Somfy RTS (blinds) - Nice Flor-S (gates) - FAAC (gates) - Keeloq/HCS301 (encrypted) **Device Categories**: - 🌡️ Weather stations (70% of 433MHz traffic) - 🚪 Remote controls (gates, garage doors) - 🔐 Security sensors - 🏠 Home automation - 🚗 Car key fobs --- ### 779-928 MHz Band (Europe 868 / North America 915) ``` 779 ─────────────────────────────────────────────────────────────── 928 MHz │ ├─ 868 MHz (Europe) ★★★★ │ │ │ ├─ 868.0-868.6 MHz Smart meters (WMBUS) │ │ └─ Gas, water, electricity meters │ │ │ ├─ 868.0-868.6 MHz LoRa IoT devices │ │ └─ Long-range sensors │ │ │ ├─ 868.30 MHz Z-Wave home automation │ │ └─ Smart home devices │ │ │ ├─ 868.40 MHz Alarm systems │ │ │ └─ 868.95 MHz SCADA systems │ └─ 915 MHz (North America, Australia) ★★★★ │ ├─ 902-928 MHz ISM band (North America) │ └─ Wide band usage │ ├─ 902-928 MHz RFID tags (UHF) │ └─ Passive and active RFID │ ├─ 915 MHz LoRa IoT (North America) │ └─ Long-range sensors │ ├─ 915 MHz Smart meters │ └─ AMR (Automatic Meter Reading) │ ├─ 902-928 MHz ZigBee (900MHz variant) │ └─ Home automation │ └─ 915 MHz Industrial sensors └─ SCADA, telemetry ``` **868 MHz (Europe) Characteristics**: - ✓ Higher bandwidth than 433MHz - ✓ Less crowded than 433MHz - ✓ Good for data-intensive apps - ✓ Better for smart meters - ✗ Reduced range vs 433MHz - ✗ Less building penetration **915 MHz (North America) Characteristics**: - ✓ Wide bandwidth (902-928 MHz) - ✓ Good for industrial IoT - ✓ High data rates possible - ✗ More interference in urban areas - ✗ Less building penetration **Common Protocols**: - LoRa (chirp spread spectrum) - WMBUS (Wireless M-Bus) - Z-Wave - ZigBee (900MHz) - Proprietary SCADA protocols **Device Categories**: - ⚡ Smart meters (electricity, gas, water) - 📡 LoRa sensors (agriculture, city infrastructure) - 🏭 Industrial telemetry - 🏠 Z-Wave home automation - 🏷️ RFID tags (logistics, inventory) --- ## Device Type to Frequency Quick Reference ### By Device Category #### 🚗 Automotive - **TPMS**: 313-316 MHz (NA), 433 MHz (EU) - **Car Key Fobs**: 315 MHz (NA), 433 MHz (EU/Asia) - **Remote Start**: 315 MHz (NA), 433 MHz (EU) #### 🏠 Home Automation - **Garage Door Openers**: 315 MHz (NA), 390 MHz (Chamberlain), 433 MHz (EU) - **Gate Openers**: 433.92 MHz (Nice, FAAC, Somfy) - **Smart Plugs**: 433 MHz, 868 MHz (Z-Wave), 915 MHz (ZigBee) - **Motorized Blinds**: 433.42 MHz (Somfy RTS) - **Doorbells**: 315 MHz (NA), 433 MHz (EU) #### 🌡️ Environmental Sensors - **Weather Stations**: 433.92 MHz (Oregon Scientific, Acurite, LaCrosse) - **Temperature Sensors**: 433 MHz - **Humidity Sensors**: 433 MHz - **Rain Gauges**: 433 MHz #### 🔐 Security Systems - **Door/Window Sensors**: 315 MHz (NA), 345 MHz (Honeywell), 319.5 MHz (GE) - **Motion Detectors**: 315 MHz, 433 MHz - **Glass Break Sensors**: 433 MHz - **Panic Buttons**: 433 MHz - **Alarm Panels**: 868 MHz (EU), 915 MHz (NA) #### ⚡ Utility/Smart Meters - **Electricity Meters**: 868 MHz (EU), 915 MHz (NA) - **Gas Meters**: 868 MHz (EU), 915 MHz (NA) - **Water Meters**: 868 MHz (EU), 915 MHz (NA) - **AMR Systems**: 915 MHz #### 📡 Industrial IoT - **SCADA Systems**: 868 MHz (EU), 915 MHz (NA) - **Telemetry**: 915 MHz - **LoRa Sensors**: 868 MHz (EU), 915 MHz (NA) - **Asset Tracking**: 915 MHz (RFID) - **Industrial Remotes**: 433 MHz --- ## Regional Frequency Regulations ### North America (FCC Part 15) - **Primary**: 315 MHz, 915 MHz - **Power Limits**: - 315 MHz: 50 mV/m at 3 meters - 915 MHz: 50 mV/m at 3 meters - **Duty Cycle**: Unlimited ### Europe (ETSI EN 300 220) - **Primary**: 433 MHz, 868 MHz - **Power Limits**: - 433 MHz: 10 mW ERP - 868 MHz: 25 mW ERP (varies by sub-band) - **Duty Cycle**: - 433 MHz: 10% or 1% - 868 MHz: 1% or 10% (depends on sub-band) ### Asia/Australia - **Primary**: 315 MHz, 433 MHz, 915 MHz - **Varies by country**: Check local regulations --- ## Modulation by Frequency ### 315 MHz - **Primary**: OOK (On-Off Keying) - **Secondary**: ASK (Amplitude Shift Keying) - **Encoding**: PWM, PPM - **Reason**: Simple, cheap, low power ### 433 MHz - **Primary**: OOK, ASK - **Secondary**: FSK (modern devices) - **Encoding**: PWM (most common), Manchester (weather stations), PPM - **Reason**: Best balance of simplicity and reliability ### 868/915 MHz - **Primary**: FSK (Frequency Shift Keying) - **Secondary**: LoRa CSS (Chirp Spread Spectrum) - **Encoding**: Manchester, GFSK, LoRa modulation - **Reason**: Higher data rates, better noise immunity required --- ## Protocol Prevalence Chart ### Most Common Protocols by Frequency **315 MHz (North America)**: 1. Princeton/PT2260 (60%) 2. EV1527 (20%) 3. Keeloq (10%) 4. Proprietary (10%) **433 MHz (Global)**: 1. EV1527 (30%) - Cheap Chinese devices 2. Oregon Scientific (15%) - Weather stations 3. Princeton/PT2260 (15%) - Generic remotes 4. Acurite (10%) - Weather sensors 5. LaCrosse (8%) - Temperature sensors 6. Somfy RTS (5%) - Motorized blinds 7. Nice Flor-S (5%) - Gate openers 8. Keeloq/HCS301 (5%) - Encrypted remotes 9. Other (7%) **868 MHz (Europe)**: 1. WMBUS (30%) - Smart meters 2. LoRa (25%) - IoT sensors 3. Z-Wave (20%) - Home automation 4. Proprietary SCADA (15%) 5. Other (10%) **915 MHz (North America)**: 1. LoRa (30%) - IoT sensors 2. RFID (25%) - Asset tracking 3. ZigBee (15%) - Industrial 4. WMBUS (15%) - Smart meters 5. Proprietary (15%) --- ## Signal Strength and Range ### Typical Ranges by Frequency ``` Frequency │ Indoor Range │ Outdoor Range (LOS) │ Penetration ───────────┼────────────────┼───────────────────────┼────────────── 315 MHz │ 50-100m │ 300-500m │ Excellent 433 MHz │ 30-100m │ 200-500m │ Very Good 868 MHz │ 20-80m │ 150-400m │ Good 915 MHz │ 20-80m │ 150-400m │ Good LoRa 868 │ 1-5km │ 10-20km │ Excellent LoRa 915 │ 1-5km │ 10-20km │ Excellent ``` **Factors Affecting Range**: - Lower frequency = better penetration - Higher power = more range (within legal limits) - Modulation type (FSK better than OOK) - Antenna quality and placement - Environmental obstacles (walls, metal, trees) - Interference from other devices --- ## Usage Recommendations for GigLez ### Device Attribution Strategy **High Confidence (0.9-1.0)**: - 433.42 MHz + OOK → **Somfy RTS blinds** - 433.92 MHz + Manchester + Oregon protocol → **Oregon Scientific weather station** - 315 MHz + Keeloq → **Car key fob** (North America) - 868 MHz + WMBUS protocol → **Smart meter** (Europe) **Medium Confidence (0.7-0.9)**: - 433 MHz + PWM + 24-bit → **EV1527 remote/sensor** - 315 MHz + PWM → **Generic garage door opener** - 433 MHz + FSK → **Modern car key fob** **Low Confidence (0.5-0.7)**: - 433 MHz + unknown protocol → **Consumer RF device** (remote, sensor, doorbell) - 915 MHz + FSK → **Industrial sensor or meter** (North America) ### Frequency-Based Categorization ```python def categorize_by_frequency(frequency: int, region: str = 'NA') -> List[str]: """ Return likely device categories based on frequency """ categories = [] if 313_000_000 <= frequency <= 316_000_000: categories.append('TPMS') if region == 'NA': categories.extend(['Garage Door', 'Car Key Fob', 'Security Sensor']) elif 319_000_000 <= frequency <= 320_000_000: categories.append('GE/Interlogix Security Sensor') elif 344_000_000 <= frequency <= 346_000_000: categories.append('Honeywell Security Sensor') elif 389_000_000 <= frequency <= 391_000_000: categories.append('Chamberlain Garage Door') elif 433_050_000 <= frequency <= 434_790_000: categories.extend([ 'Weather Station', 'Remote Control', 'Wireless Sensor', 'Car Key Fob', 'Doorbell', 'Security Sensor' ]) # Narrow down by exact frequency if 433_410_000 <= frequency <= 433_430_000: categories.insert(0, 'Somfy RTS Blind') elif 433_910_000 <= frequency <= 433_930_000: categories.insert(0, 'Generic 433MHz Device (most common)') elif 868_000_000 <= frequency <= 870_000_000: if region == 'EU': categories.extend([ 'Smart Meter', 'LoRa Sensor', 'Z-Wave Device', 'Alarm System' ]) elif 902_000_000 <= frequency <= 928_000_000: if region == 'NA': categories.extend([ 'RFID Tag', 'LoRa Sensor', 'Smart Meter', 'ZigBee Device', 'Industrial Sensor' ]) return categories ``` --- ## Summary ### Key Takeaways 1. **433 MHz is king**: Most SubGhz devices use 433MHz (Europe/Asia/Australia) 2. **315 MHz for North America**: Security and automotive in NA 3. **868/915 MHz for advanced**: Smart meters, LoRa, industrial 4. **Frequency + Modulation + Protocol** = High-confidence ID 5. **Geographic region matters**: 315/915 (NA) vs 433/868 (EU) ### Attribution Confidence Factors **Increases Confidence**: - ✓ Exact frequency match (±5kHz) - ✓ Known protocol decoded - ✓ Checksum validation passed - ✓ Modulation type matches - ✓ Bit length matches - ✓ Timing characteristics match **Decreases Confidence**: - ✗ RAW signal (no protocol decode) - ✗ Frequency mismatch - ✗ Unknown modulation - ✗ No checksum validation - ✗ Timing variations --- ## Resources - **Frequency Database**: https://www.sigidwiki.com/ - **FCC OET**: https://www.fcc.gov/oet/ea/fccid - **RTL_433 Protocols**: https://github.com/merbanan/rtl_433/tree/master/src/devices - **Flipper Zero DB**: https://github.com/Zero-Sploit/FlipperZero-Subghz-DB - **ISM Bands**: https://en.wikipedia.org/wiki/ISM_radio_band