As SA has put it there is no way to effectively control the number of downloads that they can do without having them register on your site.
you have to options that you can use
1. IP Addresses that the client visits your site
but not all Internet connections used fixed IP's so more than one person can use the same IP address
2. Cookies
This writes something in the users temporary Internet directory and you can check / read from it. BUT the user or AV Suites can remove this from the computer.
further reading
Cookies Overview[
^]