You could look at using 802.1x Authentication but you will need RADIUS etc, however there are topological limitations, but this is a growing area. Other than that i would suggest to ties a port down by MAC but the MAC in your case will change... so at the end of the day, it does not seem possible.