I don't think you're going to see a reference implementation of resetting a password via SMS from NIST any time soon. They make standards for everybody. As soon as you start using words like database and email, you are ruling out lots of applications that don't have those features.
