Use the download file server behavior provided as part of the File Manipulation functions of CSS Form Builder.
You will need to make sure the downloadable files are stored in a location on the server that cannot be accessed through a web URL.
The download File behavior includes a download count option which will update a column in the database everytime the file is downloaded.