giglez/docs/FREQUENCY_DEVICE_CHART.md

Sub-GHz Frequency to Device Type Chart

Quick Reference Guide

Visual mapping of Sub-GHz frequencies (300-928 MHz) to common IoT device types.

---

Frequency Band Overview

300 MHz ═══════════════════════════════════════════════════════════════════════ 928 MHz
│                                                                                │
│ 300-348 MHz │   387-464 MHz   │           779-928 MHz                        │
│  (NA/Asia)  │  (Global 433)   │      (EU 868 / NA 915)                       │
│                                                                                │
└────────────────────────────────────────────────────────────────────────────────┘
     TPMS         Weather/RF         Smart Meters/LoRa/RFID
   Security       Remotes            Industrial IoT
   Sensors        Doorbells

---

Detailed Frequency Map

300-348 MHz Band (North America, Asia, Japan)

300 ─────────────────────────────────────────────────────────────── 348 MHz
│
├─ 310-320 MHz   Biomedical telemetry (medical devices)
│
├─ 313-316 MHz   TPMS (Tire Pressure Monitoring Systems)
│                └─ Schrader, Continental, Pacific
│
├─ 315 MHz ★★★   Garage door openers, car key fobs
│                ├─ Generic remotes
│                ├─ Home automation
│                └─ Wireless doorbells
│
├─ 319.5 MHz     GE/Interlogix security sensors
│                └─ Professional alarm systems
│
└─ 345 MHz       Honeywell security sensors
                 └─ Residential alarm systems

Key Characteristics:

• ✓ Better building penetration
• ✓ Longer range than higher frequencies
• ✗ Lower data rates
• ✗ Larger antenna required

Common Protocols: Princeton, PT2260, EV1527

---

387-464 MHz Band (Global - Most Popular)

387 ─────────────────────────────────────────────────────────────── 464 MHz
│
├─ 390 MHz       Chamberlain garage door openers
│                └─ Security+ encrypted remotes
│
├─ 433.05-434.79 MHz ★★★★★ (PRIMARY ISM BAND - Europe/Asia/Australia)
│  │
│  ├─ 433.05 MHz    Generic remotes, sensors
│  │                └─ PT2260, EV1527, Princeton
│  │
│  ├─ 433.42 MHz    Somfy RTS (motorized blinds/shutters)
│  │                └─ Proprietary protocol
│  │
│  ├─ 433.92 MHz    Most common SubGhz frequency
│  │                ├─ Weather stations (Oregon Scientific, Acurite)
│  │                ├─ Car key fobs
│  │                ├─ Remote controls (Nice Flor-S, FAAC)
│  │                ├─ Wireless sensors
│  │                ├─ Doorbells
│  │                └─ Security sensors
│  │
│  └─ 434.79 MHz    Upper ISM limit
│
└─ 464 MHz          Citizen Band Radio (CB) / Public Mobile Radio

Key Characteristics:

• ✓ Most popular frequency worldwide
• ✓ Excellent range (10km+ with LoRa)
• ✓ Good building penetration
• ✓ Low power consumption
• ✗ Very crowded (high interference)

Common Protocols:

• Princeton (PT2262/PT2264/PT2260)
• EV1527 (cheap Chinese remotes)
• Oregon Scientific (weather stations)
• Acurite (weather sensors)
• LaCrosse (temperature/humidity)
• Nexus (outdoor sensors)
• Somfy RTS (blinds)
• Nice Flor-S (gates)
• FAAC (gates)
• Keeloq/HCS301 (encrypted)

Device Categories:

• 🌡️ Weather stations (70% of 433MHz traffic)
• 🚪 Remote controls (gates, garage doors)
• 🔐 Security sensors
• 🏠 Home automation
• 🚗 Car key fobs

---

779-928 MHz Band (Europe 868 / North America 915)

779 ─────────────────────────────────────────────────────────────── 928 MHz
│
├─ 868 MHz (Europe) ★★★★
│  │
│  ├─ 868.0-868.6 MHz    Smart meters (WMBUS)
│  │                     └─ Gas, water, electricity meters
│  │
│  ├─ 868.0-868.6 MHz    LoRa IoT devices
│  │                     └─ Long-range sensors
│  │
│  ├─ 868.30 MHz         Z-Wave home automation
│  │                     └─ Smart home devices
│  │
│  ├─ 868.40 MHz         Alarm systems
│  │
│  └─ 868.95 MHz         SCADA systems
│
└─ 915 MHz (North America, Australia) ★★★★
   │
   ├─ 902-928 MHz        ISM band (North America)
   │                     └─ Wide band usage
   │
   ├─ 902-928 MHz        RFID tags (UHF)
   │                     └─ Passive and active RFID
   │
   ├─ 915 MHz            LoRa IoT (North America)
   │                     └─ Long-range sensors
   │
   ├─ 915 MHz            Smart meters
   │                     └─ AMR (Automatic Meter Reading)
   │
   ├─ 902-928 MHz        ZigBee (900MHz variant)
   │                     └─ Home automation
   │
   └─ 915 MHz            Industrial sensors
                         └─ SCADA, telemetry

868 MHz (Europe) Characteristics:

• ✓ Higher bandwidth than 433MHz
• ✓ Less crowded than 433MHz
• ✓ Good for data-intensive apps
• ✓ Better for smart meters
• ✗ Reduced range vs 433MHz
• ✗ Less building penetration

915 MHz (North America) Characteristics:

• ✓ Wide bandwidth (902-928 MHz)
• ✓ Good for industrial IoT
• ✓ High data rates possible
• ✗ More interference in urban areas
• ✗ Less building penetration

Common Protocols:

• LoRa (chirp spread spectrum)
• WMBUS (Wireless M-Bus)
• Z-Wave
• ZigBee (900MHz)
• Proprietary SCADA protocols

Device Categories:

• ⚡ Smart meters (electricity, gas, water)
• 📡 LoRa sensors (agriculture, city infrastructure)
• 🏭 Industrial telemetry
• 🏠 Z-Wave home automation
• 🏷️ RFID tags (logistics, inventory)

---

Device Type to Frequency Quick Reference

By Device Category

🚗 Automotive

• TPMS: 313-316 MHz (NA), 433 MHz (EU)
• Car Key Fobs: 315 MHz (NA), 433 MHz (EU/Asia)
• Remote Start: 315 MHz (NA), 433 MHz (EU)

🏠 Home Automation

• Garage Door Openers: 315 MHz (NA), 390 MHz (Chamberlain), 433 MHz (EU)
• Gate Openers: 433.92 MHz (Nice, FAAC, Somfy)
• Smart Plugs: 433 MHz, 868 MHz (Z-Wave), 915 MHz (ZigBee)
• Motorized Blinds: 433.42 MHz (Somfy RTS)
• Doorbells: 315 MHz (NA), 433 MHz (EU)

🌡️ Environmental Sensors

• Weather Stations: 433.92 MHz (Oregon Scientific, Acurite, LaCrosse)
• Temperature Sensors: 433 MHz
• Humidity Sensors: 433 MHz
• Rain Gauges: 433 MHz

🔐 Security Systems

• Door/Window Sensors: 315 MHz (NA), 345 MHz (Honeywell), 319.5 MHz (GE)
• Motion Detectors: 315 MHz, 433 MHz
• Glass Break Sensors: 433 MHz
• Panic Buttons: 433 MHz
• Alarm Panels: 868 MHz (EU), 915 MHz (NA)

⚡ Utility/Smart Meters

• Electricity Meters: 868 MHz (EU), 915 MHz (NA)
• Gas Meters: 868 MHz (EU), 915 MHz (NA)
• Water Meters: 868 MHz (EU), 915 MHz (NA)
• AMR Systems: 915 MHz

📡 Industrial IoT

• SCADA Systems: 868 MHz (EU), 915 MHz (NA)
• Telemetry: 915 MHz
• LoRa Sensors: 868 MHz (EU), 915 MHz (NA)
• Asset Tracking: 915 MHz (RFID)
• Industrial Remotes: 433 MHz

---

Regional Frequency Regulations

North America (FCC Part 15)

• Primary: 315 MHz, 915 MHz
• Power Limits:
  • 315 MHz: 50 mV/m at 3 meters
  • 915 MHz: 50 mV/m at 3 meters
• Duty Cycle: Unlimited

Europe (ETSI EN 300 220)

• Primary: 433 MHz, 868 MHz
• Power Limits:
  • 433 MHz: 10 mW ERP
  • 868 MHz: 25 mW ERP (varies by sub-band)
• Duty Cycle:
  • 433 MHz: 10% or 1%
  • 868 MHz: 1% or 10% (depends on sub-band)

Asia/Australia

• Primary: 315 MHz, 433 MHz, 915 MHz
• Varies by country: Check local regulations

---

Modulation by Frequency

315 MHz

• Primary: OOK (On-Off Keying)
• Secondary: ASK (Amplitude Shift Keying)
• Encoding: PWM, PPM
• Reason: Simple, cheap, low power

433 MHz

• Primary: OOK, ASK
• Secondary: FSK (modern devices)
• Encoding: PWM (most common), Manchester (weather stations), PPM
• Reason: Best balance of simplicity and reliability

868/915 MHz

• Primary: FSK (Frequency Shift Keying)
• Secondary: LoRa CSS (Chirp Spread Spectrum)
• Encoding: Manchester, GFSK, LoRa modulation
• Reason: Higher data rates, better noise immunity required

---

Protocol Prevalence Chart

Most Common Protocols by Frequency

315 MHz (North America):

1. Princeton/PT2260 (60%)
2. EV1527 (20%)
3. Keeloq (10%)
4. Proprietary (10%)

433 MHz (Global):

1. EV1527 (30%) - Cheap Chinese devices
2. Oregon Scientific (15%) - Weather stations
3. Princeton/PT2260 (15%) - Generic remotes
4. Acurite (10%) - Weather sensors
5. LaCrosse (8%) - Temperature sensors
6. Somfy RTS (5%) - Motorized blinds
7. Nice Flor-S (5%) - Gate openers
8. Keeloq/HCS301 (5%) - Encrypted remotes
9. Other (7%)

868 MHz (Europe):

1. WMBUS (30%) - Smart meters
2. LoRa (25%) - IoT sensors
3. Z-Wave (20%) - Home automation
4. Proprietary SCADA (15%)
5. Other (10%)

915 MHz (North America):

1. LoRa (30%) - IoT sensors
2. RFID (25%) - Asset tracking
3. ZigBee (15%) - Industrial
4. WMBUS (15%) - Smart meters
5. Proprietary (15%)

---

Signal Strength and Range

Typical Ranges by Frequency

Frequency  │  Indoor Range  │  Outdoor Range (LOS)  │  Penetration
───────────┼────────────────┼───────────────────────┼──────────────
315 MHz    │  50-100m       │  300-500m             │  Excellent
433 MHz    │  30-100m       │  200-500m             │  Very Good
868 MHz    │  20-80m        │  150-400m             │  Good
915 MHz    │  20-80m        │  150-400m             │  Good
LoRa 868   │  1-5km         │  10-20km              │  Excellent
LoRa 915   │  1-5km         │  10-20km              │  Excellent

Factors Affecting Range:

• Lower frequency = better penetration
• Higher power = more range (within legal limits)
• Modulation type (FSK better than OOK)
• Antenna quality and placement
• Environmental obstacles (walls, metal, trees)
• Interference from other devices

---

Usage Recommendations for GigLez

Device Attribution Strategy

High Confidence (0.9-1.0):

• 433.42 MHz + OOK → Somfy RTS blinds
• 433.92 MHz + Manchester + Oregon protocol → Oregon Scientific weather station
• 315 MHz + Keeloq → Car key fob (North America)
• 868 MHz + WMBUS protocol → Smart meter (Europe)

Medium Confidence (0.7-0.9):

• 433 MHz + PWM + 24-bit → EV1527 remote/sensor
• 315 MHz + PWM → Generic garage door opener
• 433 MHz + FSK → Modern car key fob

Low Confidence (0.5-0.7):

• 433 MHz + unknown protocol → Consumer RF device (remote, sensor, doorbell)
• 915 MHz + FSK → Industrial sensor or meter (North America)

Frequency-Based Categorization

def categorize_by_frequency(frequency: int, region: str = 'NA') -> List[str]:
    """
    Return likely device categories based on frequency
    """
    categories = []

    if 313_000_000 <= frequency <= 316_000_000:
        categories.append('TPMS')
        if region == 'NA':
            categories.extend(['Garage Door', 'Car Key Fob', 'Security Sensor'])

    elif 319_000_000 <= frequency <= 320_000_000:
        categories.append('GE/Interlogix Security Sensor')

    elif 344_000_000 <= frequency <= 346_000_000:
        categories.append('Honeywell Security Sensor')

    elif 389_000_000 <= frequency <= 391_000_000:
        categories.append('Chamberlain Garage Door')

    elif 433_050_000 <= frequency <= 434_790_000:
        categories.extend([
            'Weather Station',
            'Remote Control',
            'Wireless Sensor',
            'Car Key Fob',
            'Doorbell',
            'Security Sensor'
        ])

        # Narrow down by exact frequency
        if 433_410_000 <= frequency <= 433_430_000:
            categories.insert(0, 'Somfy RTS Blind')
        elif 433_910_000 <= frequency <= 433_930_000:
            categories.insert(0, 'Generic 433MHz Device (most common)')

    elif 868_000_000 <= frequency <= 870_000_000:
        if region == 'EU':
            categories.extend([
                'Smart Meter',
                'LoRa Sensor',
                'Z-Wave Device',
                'Alarm System'
            ])

    elif 902_000_000 <= frequency <= 928_000_000:
        if region == 'NA':
            categories.extend([
                'RFID Tag',
                'LoRa Sensor',
                'Smart Meter',
                'ZigBee Device',
                'Industrial Sensor'
            ])

    return categories

---

Summary

Key Takeaways

1. 433 MHz is king: Most SubGhz devices use 433MHz (Europe/Asia/Australia)
2. 315 MHz for North America: Security and automotive in NA
3. 868/915 MHz for advanced: Smart meters, LoRa, industrial
4. Frequency + Modulation + Protocol = High-confidence ID
5. Geographic region matters: 315/915 (NA) vs 433/868 (EU)

Attribution Confidence Factors

Increases Confidence:

• ✓ Exact frequency match (±5kHz)
• ✓ Known protocol decoded
• ✓ Checksum validation passed
• ✓ Modulation type matches
• ✓ Bit length matches
• ✓ Timing characteristics match

Decreases Confidence:

• ✗ RAW signal (no protocol decode)
• ✗ Frequency mismatch
• ✗ Unknown modulation
• ✗ No checksum validation
• ✗ Timing variations

---

Resources

• Frequency Database: https://www.sigidwiki.com/
• FCC OET: https://www.fcc.gov/oet/ea/fccid
• RTL_433 Protocols: https://github.com/merbanan/rtl_433/tree/master/src/devices
• Flipper Zero DB: https://github.com/Zero-Sploit/FlipperZero-Subghz-DB
• ISM Bands: https://en.wikipedia.org/wiki/ISM_radio_band