I'm assuming that you want to force a user to log in to be able to download a file off the server. You can use NT Security on the files... this is done by changing the permissions on the files themselves and changing the settings in IIS for the directory they reside in. Or, you can insert the files into a database. But this way you have to write an application to insert the files into a binary blob field in your database software.
Hope this helps.