One account per person is ideal, but how on earth are you ever going to detect multiple accounts? Registration IP address is of no use, nor is email address. With out requiring users to submit personal info like Driver's license, passport, SSN, etc., and verifying those credentials on an individual basis, it's going to next to impossible to police all the accounts. I hate to be a skeptic, but I don't see an easy way to keep this from happening.