Inspired by Boyd's 1986 paper "Digital Multisignatures", which introduced additive secret sharing for splitting RSA keys. Unfortunately I haven't found an online version of that paper, although a followup from 1988 is available. https://link.springer.com/content/pdf/10.1007/3-540-45961-8_40.pdf