It appeared as an idea in one of posts on bitcointalk as far back as 2011. The first implementation was realized a year later, in 2012, in PPCoin cryptocurrency (now called PeerCoin). Later on, such protocols appeared in other projects as well, but all in due course.