Data Privacy Protection by Kernel Subspace Projection and Generalized Eigenvalue